REDHAT-BUG-2453139: High severity vim Vim vulnerability

Q: Who is exposed to this issue?

Users of Vim versions before 9.2.0272 are exposed if they open a crafted file. The issue occurs in Vim's default configuration, so a non-default setup is not required.

Q: What does an attacker need to do to exploit it?

An attacker needs to provide a crafted file and have a victim open it in Vim. Code execution happens immediately when the file is opened.

Q: How can I determine whether my Vim installation is affected?

Check the installed Vim version. Versions before 9.2.0272 are affected according to the available information.

Published Mar 30, 2026

Updated

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking PMLE.

Affected Software

1 affected component

vim Vim<9.2.0272

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade vim to a version that resolves this vulnerability.
Fixed in 9.2.0272

Event History

Mar 30, 2026

Data Sourced

via Red Hat·07:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Users of Vim versions before 9.2.0272 are exposed if they open a crafted file. The issue occurs in Vim's default configuration, so a non-default setup is not required.

What does an attacker need to do to exploit it?

An attacker needs to provide a crafted file and have a victim open it in Vim. Code execution happens immediately when the file is opened.

How can I determine whether my Vim installation is affected?

Check the installed Vim version. Versions before 9.2.0272 are affected according to the available information.

REDHAT-BUG-2453139: High severity vim Vim vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to exploit it?

How can I determine whether my Vim installation is affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to exploit it?

How can I determine whether my Vim installation is affected?