Vulnpedia
← All CVEs

CVE-2026-28417

MEDIUM 4.4 ALL-YEARS

Published 2026-02-27 · Last modified 2026-05-28 · GitHub_M · NVD: Analyzed

Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.

LIMITED SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

1.4%chance of exploitation in 30 days · 71st percentile

○ In CISA KEV○ Catalogued PoC◆ SSVC: exploitation none, automatable no

Impact if exploited

4.4CVSS 3.1 · MEDIUM · CNA

  • ConfidentialityLow
  • IntegrityLow
  • AvailabilityNone

What an attacker needs

  • ⚠Access: Requires local access to the host
  • ✓Privileges: No account or privileges required
  • ⚠User interaction: A user must take an action (click / open a file)
  • ✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Vim

Products Vim

Weakness (CWE)

  • CWE-86: : Improper Neutralization of Invalid Characters in Identifiers in Web Pages
  • CWE-78: OS command injection

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

References and research data (JSON)

Vendor product assessments

Showing 32 of 835 vendor product statements; 803 omitted. Read the full vendor advisory.

  • vim-2:7.4.629-5.el6_10.4.src as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_10.4?arch=src&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • rhcos-ppc64le-415.92.202605060220-0 as a component of Red Hat OpenShift Container Platform 4.15 · fixed

    Vendor assessment for this product only.

    pkg:generic/redhat/[email protected]?arch=ppc64le

    • vendor fix: For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:20b5c12f3ca21aecb8a8b0208cc0c1e91b979f31e2dff4d7706eacc87afb9136 (For s390x architecture) The image digest is sha256:8c7f987d305edccc45f5e8646b436b17e1ed663cf44f146eb31b16ecd721309b (For ppc64le architecture) The image digest is sha256:0479a675177654d15cd698e7b27b18a4638e435fd2476e198602e4865bd68e8b (For aarch64 architecture) The image digest is sha256:1079c0d0e47ebb0e9a9c95842c52caa8bf33105c579b090dd307639abd0c9d79 All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli. Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-enhanced-debuginfo-2:9.1.083-5.el10_0.2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0.2?arch=aarch64&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-filesystem-2:8.0.1763-15.el8_4.1.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4.1?arch=noarch&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-debugsource-2:8.0.1763-19.el8_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6.5?arch=ppc64le&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-filesystem-2:8.0.1763-20.el8_8.1.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8.1?arch=noarch&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-enhanced-debuginfo-2:8.2.2637-16.el9_0.4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0.4?arch=s390x&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-X11-2:8.2.2637-20.el9_4.2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4.2?arch=aarch64&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-X11-debuginfo-2:8.2.2637-22.el9_6.2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6.2?arch=x86_64&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-debuginfo-2:9.1.083-5.el10_0.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0.2?arch=x86_64&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-debuginfo-2:8.0.1763-15.el8_4.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4.1?arch=x86_64&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-2:8.0.1763-19.el8_6.5.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6.5?arch=src&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-debuginfo-2:8.2.2637-16.el9_0.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0.4?arch=x86_64&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-minimal-2:8.2.2637-20.el9_2.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2.1?arch=s390x&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-common-debuginfo-2:8.2.2637-22.el9_6.2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6.2?arch=s390x&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • registry.redhat.io/rhui5/rhua-tp-rhel9@sha256:1debabb74204bd06904737367b77cb42ab5d69e73da5c051e74e8dbc7e6719fa_amd64 as a component of Red Hat Update Infrastructure 5 · fixed

    Vendor assessment for this product only.

    pkg:oci/rhua-tp-rhel9@sha256%3A1debabb74204bd06904737367b77cb42ab5d69e73da5c051e74e8dbc7e6719fa?arch=amd64&repository_url=registry.redhat.io/rhui5&tag=1777459504

    • vendor fix: Please consult the RHUI Technology Preview Release Notes at https://access.redhat.com/articles/7141172 for instructions on how to use this image set. Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-debuginfo-2:7.4.629-5.el6_10.4.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_10.4?arch=i686&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-X11-debuginfo-2:9.1.083-6.el10_1.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_1.3?arch=aarch64&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-enhanced-2:9.1.083-6.el10_1.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_1.3?arch=ppc64le&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • xxd-2:9.1.083-6.el10_1.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_1.3?arch=s390x&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-X11-debuginfo-2:8.0.1763-22.el8_10.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_10.1?arch=x86_64&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-enhanced-2:8.0.1763-22.el8_10.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_10.1?arch=aarch64&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-X11-2:8.2.2637-23.el9_7.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_7.2?arch=aarch64&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-debuginfo-2:8.2.2637-23.el9_7.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_7.2?arch=ppc64le&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-enhanced-debuginfo-2:8.2.2637-23.el9_7.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_7.2?arch=x86_64&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-debuginfo-2:9.1.083-6.el10_1.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_1.3?arch=x86_64&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-minimal-2:9.1.083-6.el10_1.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_1.3?arch=x86_64&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-common-debuginfo-2:8.0.1763-22.el8_10.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_10.1?arch=aarch64&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-enhanced-debuginfo-2:8.0.1763-22.el8_10.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_10.1?arch=ppc64le&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-X11-debuginfo-2:8.2.2637-23.el9_7.2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_7.2?arch=s390x&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-debugsource-2:8.2.2637-23.el9_7.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_7.2?arch=x86_64&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00
  • vim-minimal-debuginfo-2:8.2.2637-23.el9_7.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_7.2?arch=x86_64&epoch=2

    Red Hat · CVE-2026-28417 · Updated 2026-10-16T11:09:33+00:00

Known Affected Software Configurations

VendorProductVersion range
VimVim< 9.2.0073

All CVSS metrics

  • MEDIUM 4.4 v3.1 · CNA Primary
    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
  • MEDIUM 4.4 v3.1 · NVD Secondary
    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
  • HIGH 7.8 v3.1 · NVD Primary
    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Patches & mitigations

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS