THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-34982 (HIGH 8.2) — Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a

[NVD] CVE-2026-34982 (HIGH 8.2) — Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a

lownvdPublished 2026-04-06

CVE-2026-34982 CVSS: 8.2 HIGH Published: 2026-04-06T16:16:38.777

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()`

Indicators of compromise

CVE-2026-34982cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-34982