[vim-security] Command Execution via Rmd Syntax Highlighting in Vim < 9.2.1178
Vim before 9.2.1178 can run OS commands via R Markdown syntax highlighting; no CVE yet.
Christian Brabandt reported a medium-severity command-execution flaw in Vim versions before 9.2.1178. The R Markdown syntax script in runtime/syntax/rmd.vim collects language names of code chunks from the buffer and can lead to OS command execution. The issue is tracked as CWE-78 and CWE-20. A CVE has been requested but is not yet assigned, and the report does not describe exploitation in the wild.
- Affects Vim versions before 9.2.1178 through runtime/syntax/rmd.vim.
- R Markdown syntax highlighting can lead to OS command execution.
- Rated medium; mapped to CWE-78 and CWE-20.
- A CVE was requested but has not yet been assigned.
Posted by Christian Brabandt on Oct 12 Command Execution via Rmd Syntax Highlighting in Vim < 9.2.1178 =============================================================== Date: 12.10.2026 Severity: Medium CVE: *requested, not yet assigned* CWE: Improper Neutralization of Special Elements used in an OS Command (CWE-78), Improper Input Validation (CWE-20) ## Summary The R Markdown syntax script in `runtime/syntax/rmd.vim` collects the language names of code chunks from the buffer...
This source does not provide full text. Read it at seclists.org.