[vim-security] Ex Command Injection in sign_jump() in Vim < v9.2.1090
Vim sign_jump() before v9.2.1090 permits Ex command injection via unescaped buffer names; low-severity patch disclosed by Christian Brabandt.
Christian Brabandt disclosed an Ex command injection vulnerability in Vim's sign_jump() function affecting versions before v9.2.1090, caused by improper neutralization of unescaped buffer names. The issue is rated Low severity and maps to CWE-88 (argument injection) and CWE-94 (code injection). A CVE has been requested but not yet assigned.
- Ex command injection via unescaped buffer name in sign_jump().
- Affects Vim versions before v9.2.1090.
- Rated low severity; CVE requested but not yet assigned.
- Classified as CWE-88 and CWE-94.
Posted by Christian Brabandt on Sep 12 Ex Command Injection via Unescaped Buffer Name in sign_jump() in Vim < v9.2.1090 ================================================================================ Date: 12.09.2026 Severity: Low CVE: *requested, not yet assigned* CWE: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') (CWE-88), Improper Control of Generation of Code ('Code Injection') (CWE-94) ## Summary When jumping to...
This source does not provide full text. Read it at seclists.org.