Read the docs
TI-2026-25809 Aliases CVE-2026-33412

Vim affected by Command injection via newline in glob()

Priority LOW 36CWE-78Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-78.

Summary

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00867 58th percentileScored 2026-11-07
Fix Fixed vim (vim): 9.2.0202Red Hat: 30 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
vimvimbefore 9.2.02029.2.0202Patch availableCNA
  • vim Vendorvim Affected before 9.2.0202 Fixed in 9.2.0202 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*before 9.2.0202Vulnerablevim
  • cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:* Versions before 9.2.0202 Vulnerable ·vim

Remediation

  • Fix · CNA vim (vim) Fixed in 9.2.0202

Red Hat 30 advisories

  • RHSA-2026:25096 Released 2026-06-10 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.2.2 (cuda)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:17596 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.17.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 rhcos-aarch64-417.94.202605112123-0, rhcos-ppc64le-417.94.202605112123-0, rhcos-s390x-417.94.202605112123-0 +1
  • RHSA-2026:14773 Released 2026-05-13 · Red Hat rating Important
    OpenShift Container Platform 4.15.64 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202605060220-0, rhcos-ppc64le-415.92.202605060220-0, rhcos-s390x-415.92.202605060220-0 +1
Show 27 more Red Hat advisories
  • RHSA-2026:15087 Released 2026-05-13 · Red Hat rating Important
    OpenShift Container Platform 4.14.65 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202605060243-0, rhcos-ppc64le-414.92.202605060243-0, rhcos-s390x-414.92.202605060243-0 +1
  • RHSA-2026:16174 Released 2026-05-12 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.3 (Spyre)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
  • RHSA-2026:16009 Released 2026-05-11 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.3 (ROCm)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:16008 Released 2026-05-11 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.3.3 (CUDA)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:12274 Released 2026-05-08 · Red Hat rating Important
    OpenShift Container Platform 4.12.88 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202604281506-0
  • RHSA-2026:10097 Released 2026-04-30 · Red Hat rating Important
    OpenShift Container Platform 4.16.60 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202604211449-0, rhcos-ppc64le-416.94.202604211449-0, rhcos-s390x-416.94.202604211449-0 +1
  • RHSA-2026:11768 Released 2026-04-29 · Red Hat rating Important
    Red Hat Update Infrastructure 5.2 Technology Preview security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-tp-rhel9, registry.redhat.io/rhui5/installer-tp-rhel9, registry.redhat.io/rhui5/rhua-tp-rhel9
  • RHSA-2026:10065 Released 2026-04-23 · Red Hat rating Important
    Red Hat Update Infrastructure 5.1 security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9, registry.redhat.io/rhui5/installer-rhel9 +1
  • RHSA-2026:9832 Released 2026-04-22 · Red Hat rating Important
    Insights proxy Container Image
    • Red Hat Insights proxy 1.5 registry.redhat.io/insights-proxy/insights-proxy-container-rhel9
  • RHSA-2026:8423 Released 2026-04-22 · Red Hat rating Important
    OpenShift Container Platform 4.18.38 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202604140044-0, rhcos-ppc64le-418.94.202604140044-0, rhcos-s390x-418.94.202604140044-0 +1
  • RHSA-2026:7243 Released 2026-04-16 · Red Hat rating Important
    OpenShift Container Platform 4.19.28 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202604080618-0, rhcos-ppc64le-4.19.9.6.202604080618-0, rhcos-s390x-4.19.9.6.202604080618-0 +1
  • RHSA-2026:7239 Released 2026-04-16 · Red Hat rating Important
    OpenShift Container Platform 4.13.65 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202604080111-0
  • RHSA-2026:8259 Released 2026-04-15 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux AppStream (v. 9) vim-X11-2:8.2.2637-23.el9_7.2, vim-common-2:8.2.2637-23.el9_7.2, vim-enhanced-2:8.2.2637-23.el9_7.2
    • Red Hat Enterprise Linux BaseOS (v. 9) vim-2:8.2.2637-23.el9_7.2, vim-minimal-2:8.2.2637-23.el9_7.2
  • RHSA-2026:7711 Released 2026-04-13 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux AppStream (v. 10) vim-X11-2:9.1.083-6.el10_1.3, vim-common-2:9.1.083-6.el10_1.3, vim-enhanced-2:9.1.083-6.el10_1.3
    • Red Hat Enterprise Linux BaseOS (v. 10) vim-2:9.1.083-6.el10_1.3, vim-minimal-2:9.1.083-6.el10_1.3
  • RHSA-2026:7335 Released 2026-04-09 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:6915 Released 2026-04-07 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux AppStream (v. 8) vim-X11-2:8.0.1763-22.el8_10.1, vim-common-2:8.0.1763-22.el8_10.1, vim-enhanced-2:8.0.1763-22.el8_10.1
    • Red Hat Enterprise Linux BaseOS (v. 8) vim-2:8.0.1763-22.el8_10.1
  • RHSA-2026:6736 Released 2026-04-07 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) vim-X11-2:8.0.1763-20.el8_8.1, vim-common-2:8.0.1763-20.el8_8.1, vim-enhanced-2:8.0.1763-20.el8_8.1 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) vim-X11-2:8.0.1763-20.el8_8.1, vim-common-2:8.0.1763-20.el8_8.1, vim-enhanced-2:8.0.1763-20.el8_8.1 +1
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) vim-2:8.0.1763-20.el8_8.1, vim-minimal-2:8.0.1763-20.el8_8.1
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) vim-2:8.0.1763-20.el8_8.1, vim-minimal-2:8.0.1763-20.el8_8.1
  • RHSA-2026:6731 Released 2026-04-07 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) vim-X11-2:8.0.1763-19.el8_6.5, vim-common-2:8.0.1763-19.el8_6.5, vim-enhanced-2:8.0.1763-19.el8_6.5 +1
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) vim-X11-2:8.0.1763-19.el8_6.5, vim-common-2:8.0.1763-19.el8_6.5, vim-enhanced-2:8.0.1763-19.el8_6.5 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) vim-X11-2:8.0.1763-19.el8_6.5, vim-common-2:8.0.1763-19.el8_6.5, vim-enhanced-2:8.0.1763-19.el8_6.5 +1
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) vim-2:8.0.1763-19.el8_6.5, vim-minimal-2:8.0.1763-19.el8_6.5
    • Red Hat Enterprise Linux BaseOS E4S (v.8.6) vim-2:8.0.1763-19.el8_6.5, vim-minimal-2:8.0.1763-19.el8_6.5
    • Red Hat Enterprise Linux BaseOS TUS (v.8.6) vim-2:8.0.1763-19.el8_6.5, vim-minimal-2:8.0.1763-19.el8_6.5
  • RHSA-2026:6729 Released 2026-04-07 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) vim-X11-2:8.0.1763-15.el8_4.1, vim-common-2:8.0.1763-15.el8_4.1, vim-enhanced-2:8.0.1763-15.el8_4.1 +1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) vim-X11-2:8.0.1763-15.el8_4.1, vim-common-2:8.0.1763-15.el8_4.1, vim-enhanced-2:8.0.1763-15.el8_4.1 +1
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) vim-2:8.0.1763-15.el8_4.1, vim-minimal-2:8.0.1763-15.el8_4.1
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) vim-2:8.0.1763-15.el8_4.1, vim-minimal-2:8.0.1763-15.el8_4.1
  • RHSA-2026:6730 Released 2026-04-07 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) vim-X11-2:8.0.1763-13.el8_2.1, vim-common-2:8.0.1763-13.el8_2.1, vim-enhanced-2:8.0.1763-13.el8_2.1 +1
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) vim-2:8.0.1763-13.el8_2.1, vim-minimal-2:8.0.1763-13.el8_2.1
  • RHSA-2026:6725 Released 2026-04-07 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) vim-2:7.4.629-5.el6_10.3, vim-X11-2:7.4.629-5.el6_10.3, vim-common-2:7.4.629-5.el6_10.3 +3
  • RHSA-2026:6620 Released 2026-04-06 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) vim-X11-2:8.2.2637-20.el9_2.1, vim-common-2:8.2.2637-20.el9_2.1, vim-enhanced-2:8.2.2637-20.el9_2.1
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) vim-2:8.2.2637-20.el9_2.1, vim-filesystem-2:8.2.2637-20.el9_2.1, vim-minimal-2:8.2.2637-20.el9_2.1
  • RHSA-2026:6617 Released 2026-04-06 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) vim-2:7.4.629-8.el7_9.1, vim-X11-2:7.4.629-8.el7_9.1, vim-common-2:7.4.629-8.el7_9.1 +3
  • RHSA-2026:6619 Released 2026-04-06 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) vim-X11-2:8.2.2637-16.el9_0.4, vim-common-2:8.2.2637-16.el9_0.4, vim-enhanced-2:8.2.2637-16.el9_0.4
    • Red Hat Enterprise Linux BaseOS E4S (v.9.0) vim-2:8.2.2637-16.el9_0.4, vim-filesystem-2:8.2.2637-16.el9_0.4, vim-minimal-2:8.2.2637-16.el9_0.4
  • RHSA-2026:6539 Released 2026-04-02 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) vim-X11-2:8.2.2637-22.el9_6.2, vim-common-2:8.2.2637-22.el9_6.2, vim-enhanced-2:8.2.2637-22.el9_6.2
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) vim-2:8.2.2637-22.el9_6.2, vim-filesystem-2:8.2.2637-22.el9_6.2, vim-minimal-2:8.2.2637-22.el9_6.2
  • RHSA-2026:6540 Released 2026-04-02 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) vim-X11-2:8.2.2637-20.el9_4.2, vim-common-2:8.2.2637-20.el9_4.2, vim-enhanced-2:8.2.2637-20.el9_4.2
    • Red Hat Enterprise Linux BaseOS EUS (v.9.4) vim-2:8.2.2637-20.el9_4.2, vim-filesystem-2:8.2.2637-20.el9_4.2, vim-minimal-2:8.2.2637-20.el9_4.2
  • RHSA-2026:6502 Released 2026-04-02 · Red Hat rating Important
    vim security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) vim-X11-2:9.1.083-5.el10_0.2, vim-common-2:9.1.083-5.el10_0.2, vim-enhanced-2:9.1.083-5.el10_0.2 +1
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) vim-2:9.1.083-5.el10_0.2, vim-data-2:9.1.083-5.el10_0.2, vim-filesystem-2:9.1.083-5.el10_0.2 +1

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat AI Inference Server 3.2Fixed RHSA-2026:25096, RHSA-2026:7335
Red Hat AI Inference Server 3.3Fixed RHSA-2026:16008, RHSA-2026:16009, RHSA-2026:16174
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:7711
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:6915
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:8259
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2026:6730
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:6729
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:6731
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2026:6731
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:6736
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2026:6619
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:6620
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:6502
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:6540
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:6539
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:6729
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2026:6731
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:6736
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:7711
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:6915
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:8259
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2026:6730
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:6729
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:6731
Red Hat Enterprise Linux BaseOS E4S (v.8.6)Fixed RHSA-2026:6731
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:6736
Red Hat Enterprise Linux BaseOS E4S (v.9.0)Fixed RHSA-2026:6619
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:6620
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:6502
Red Hat Enterprise Linux BaseOS EUS (v.9.4)Fixed RHSA-2026:6540
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:6539
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:6729
Red Hat Enterprise Linux BaseOS TUS (v.8.6)Fixed RHSA-2026:6731
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:6736
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:6617
Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)Fixed RHSA-2026:6725
Red Hat Insights proxy 1.5Fixed RHSA-2026:9832
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:12274
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2026:7239
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:15087
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:14773
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:10097
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:17596
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:8423
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:7243
Red Hat Update Infrastructure 5Fixed RHSA-2026:10065, RHSA-2026:11768
Not affected: 6 products
  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Enterprise Linux AppStream (v. 9)
  • Red Hat Enterprise Linux BaseOS (v. 10)
  • Red Hat Enterprise Linux BaseOS (v. 8)
  • Red Hat Enterprise Linux BaseOS (v. 9)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-33412
  2. 2026-10-13 Affected versions changed · Red Hat

References

Patch 3

Other 1

  • TI-2022-03248 Heap-based Buffer Overflow in vim/vim CVSS 3.1CRITICAL 9.8
  • TI-2024-15103 Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c… CVSS 3.1HIGH 7.8
  • TI-2023-05093 Use After Free in vim/vim CVSS 3.1HIGH 7.8
  • TI-2023-04407 Heap-based Buffer Overflow in vim/vim CVSS 3.1HIGH 7.8
  • TI-2023-04379 Heap-based Buffer Overflow in vim/vim CVSS 3.1HIGH 7.8
  • TI-2023-04378 Use After Free in vim/vim CVSS 3.1HIGH 7.8
See all 258 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences