Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Vim can run unexpected code from edited Python files
published 4 months ago
Summary
The Vim text editor, when it has Python support turned on, could run any code that is inside a Python file you open. An attacker could place a specially crafted file that makes Vim execute malicious commands with your user rights. Update Vim to the latest version (9.2.0561 or newer) or turn off Python completion to protect yourself.
What to do
- Update echo vim to version 2:9.2.0524-1+e2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | vim |
< 2:9.2.0524-1+e2 Fix: upgrade to 2:9.2.0524-1+e2
|
Original advisory text
ECHO-c2a9-cb6f-d4b0
References
Timeline
Published12 Jun 2026
Updated15 Jun 2026
First seen15 Jun 2026
Sources
ECHO-c2a9-cb6f-d4b0 · OSV
Track software like this
Free during beta