THREATOPS
THREAT OPSThreat News › [vim-security] Ex Command Injection in sign_jump() in Vim < v9.2.1090

[vim-security] Ex Command Injection in sign_jump() in Vim < v9.2.1090

lowoss_secPublished 2026-09-12

<p>Posted by Christian Brabandt on Sep 12</p>Ex Command Injection via Unescaped Buffer Name in sign_jump() in Vim &lt; v9.2.1090<br /> ================================================================================<br /> <br /> Date: 12.09.2026<br /> Severity: Low<br /> CVE: *requested, not yet assigned*<br /> CWE: Improper Neutralization of Argument Delimiters in a Command (&apos;Argument Inject

Original source: https://seclists.org/oss-sec/2026/q3/725