CVE-2026-57456

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699.

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt04! or VimCrypt05! method (xchacha20poly1305, requires the +sodium feature) whose body is shorter than a single libsodium secretstream header, an unsigned length calculation underflows and a subsequent decryption call reads far past the end of the input buffer, crashing Vim. This vulnerability is fixed in 9.2.0671.(CVE-2026-57452)

Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word through a spell file's SOFO (sound-folding) byte map into a caller-owned result buffer. Its copy loop advances the output index ri with no upper bound and terminates only on the input NUL, writing one byte per input byte into the MAXWLEN-element stack buffer the caller provides. A word longer than MAXWLEN, passed to soundfold() (or reached via sound-based spell suggestion) while a SOFO-based spell language is active, therefore writes past the end of that buffer. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0698.(CVE-2026-57455)

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699.(CVE-2026-57456)

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

• vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)

• vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)

• vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)

• vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)

• vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

• vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)

• vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)

• vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)

• vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)

• vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

• vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)

• vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)

• vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)

• vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699.

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

• vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)
• vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)
• vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)
• vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)
• vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

• vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)
• vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)
• vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)
• vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)
• vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

• vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)
• vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)
• vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)
• vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699.

• CVE-2026-55693: fix out-of-bounds write in tree_count_words()
• CVE-2026-55892: fix out-of-bounds write in dump_prefixes()
• CVE-2026-57455: fix out-of-bounds write in soundfold()
• CVE-2026-57456: fix code execution in Python omni-completion

• CVE-2026-55693: fix out-of-bounds write in tree_count_words()
• CVE-2026-55892: fix out-of-bounds write in dump_prefixes()
• CVE-2026-57455: fix out-of-bounds write in soundfold()
• CVE-2026-57456: fix code execution in Python omni-completion

• CVE-2026-55693: fix out-of-bounds write in tree_count_words()
• CVE-2026-55892: fix out-of-bounds write in dump_prefixes()
• CVE-2026-57455: fix out-of-bounds write in soundfold()
• CVE-2026-57456: fix code execution in Python omni-completion

• SECURITY UPDATE: out-of-bounds write parsing a crafted spell file: tree_count_words() and sug_filltree() descended the word trie without bounding the recursion depth, so a deeply nested trie wrote past the ends of their MAXWLEN-sized arridx[], curi[] and wordcount[] arrays.
  • debian/patches/CVE-2026-55693.patch: only descend while depth < MAXWLEN - 1 in both trie walkers, in src/spell.c; matches upstream patch 9.2.0653.
  • CVE-2026-55693
• SECURITY UPDATE: stack out-of-bounds write in dump_prefixes() when dumping spell prefixes (:spelldump): the word trie was descended without bounding the recursion depth, overflowing the MAXWLEN-sized prefix[], arridx[] and curi[] arrays.
  • debian/patches/CVE-2026-55892.patch: only descend while depth < MAXWLEN - 1, in src/spell.c; matches upstream patch 9.2.0662.
  • CVE-2026-55892
• SECURITY UPDATE: out-of-bounds write in soundfold(): the single-byte branch of spell_soundfold_sofo() wrote one result byte per input byte into the MAXWLEN-sized res[] buffer with no bound, so a long word overflowed it.
  • debian/patches/CVE-2026-57455.patch: stop the translation loop once ri reaches MAXWLEN - 1, in src/spell.c; matches upstream patch 9.2.0698.
  • CVE-2026-57455
• SECURITY UPDATE: arbitrary code execution in the python and python3 omni-completion plugins: reconstructed class/function definitions ran through exec() embedded buffer-supplied docstrings inside a triple- quoted Python string literal, so a docstring containing a closing triple-quote broke out of the literal and executed attacker code.
  • debian/patches/CVE-2026-57456.patch: quote docstrings with repr() instead of triple-quoting, in runtime/autoload/python3complete.vim and pythoncomplete.vim; matches upstream patch 9.2.0699.
  • CVE-2026-57456

• CVE-2026-55693: bound the trie-descent depth counter against the MAXWLEN-element stack arrays in tree_count_words() to prevent an out-of-bounds write when reading a crafted spell file (src/spellfile.c, upstream vim 9.2.0653)
• CVE-2026-55892: bound the trie-descent depth counter in dump_prefixes() to prevent a stack out-of-bounds write with a crafted .spl spell file (src/spell.c, upstream vim 9.2.0662)
• CVE-2026-57455: bound the single-byte SOFO result copy in spell_soundfold_sofo() to MAXWLEN-1 to prevent a stack out-of-bounds write when sound-folding long words (src/spell.c, upstream vim 9.2.0698)
• CVE-2026-57456: use repr() on reconstructed docstrings in the python3 omni-completion so a hostile buffer cannot break out of the triple-quoted literal and execute arbitrary Python during completion (runtime/autoload/python3complete.vim, upstream vim 9.2.0699)

• SECURITY UPDATE: Out-of-bounds write in tree_count_words() in src/spellfile.c when a crafted .spl/.sug spell-file pair loaded during spell suggestion drives the word-trie descent past the end of the MAXWLEN-sized arridx, curi and wordcount stack arrays
  • debian/patches/CVE-2026-55693.patch: bound the descent in tree_count_words() and sug_filltree() with depth < MAXWLEN - 1, matching the sibling trie walkers, so the depth index can no longer run past the fixed MAXWLEN-sized arrays
  • CVE-2026-55693
• SECURITY UPDATE: Out-of-bounds write in spell_soundfold_sofo() in src/spell.c when a word longer than MAXWLEN is sound-folded through a spell file's SOFO byte map while a SOFO-based spell language is active, writing past the end of the caller's MAXWLEN-sized result buffer
  • debian/patches/CVE-2026-57455.patch: bound the single-byte SOFO translation loop in spell_soundfold_sofo() with ri < MAXWLEN - 1 so the output index can no longer run past the fixed MAXWLEN-sized result buffer
  • CVE-2026-57455
• SECURITY UPDATE: Code execution via Python omni-completion inserting buffer-derived docstrings verbatim between triple quotes in the reconstructed source run through exec(), letting a crafted docstring break out of the triple-quoted literal and execute attacker-controlled code
  • debian/patches/CVE-2026-57456.patch: use repr() to quote docstrings in the Scope, Class, and Function get_code() methods of python3complete and pythoncomplete so docstring text can no longer break out of the generated string literal
  • CVE-2026-57456

• CVE-2026-55693: bound the trie-descent depth counter against the MAXWLEN-element stack arrays in tree_count_words() to prevent an out-of-bounds write when reading a crafted spell file (src/spellfile.c, upstream vim 9.2.0653)
• CVE-2026-55892: bound the trie-descent depth counter in dump_prefixes() to prevent a stack out-of-bounds write with a crafted .spl spell file (src/spell.c, upstream vim 9.2.0662)
• CVE-2026-57455: bound the single-byte SOFO result copy in spell_soundfold_sofo() to MAXWLEN-1 to prevent a stack out-of-bounds write when sound-folding long words (src/spell.c, upstream vim 9.2.0698)
• CVE-2026-57456: use repr() on reconstructed docstrings in the python3 omni-completion so a hostile buffer cannot break out of the triple-quoted literal and execute arbitrary Python during completion (runtime/autoload/python3complete.vim, upstream vim 9.2.0699)

• CVE-2026-57456: use repr() to quote python omni-completion doc strings before exec() in the Scope/Class/Function get_code() of pythoncomplete/python3complete, preventing code execution via a crafted docstring (upstream 9.2.0699)

• CVE-2026-57456: use repr() to quote python omni-completion doc strings before exec() in the Scope/Class/Function get_code() of pythoncomplete/python3complete, preventing code execution via a crafted docstring (upstream 9.2.0699)

• CVE-2026-57456: use repr() to quote python omni-completion doc strings before exec() in the Scope/Class/Function get_code() of pythoncomplete/python3complete, preventing code execution via a crafted docstring (upstream 9.2.0699)

• CVE-2026-57456: use repr() to quote python omni-completion doc strings before exec() in the Scope/Class/Function get_code() of pythoncomplete/python3complete, preventing code execution via a crafted docstring (upstream 9.2.0699)

• SECURITY UPDATE: command injection in the tar plugin: tar#Vimuntar() escaped the tarball name with shellescape() without the special argument before running gunzip/gzip through :!, so characters that Vim expands in a :! command line (such as % and #) survived in the name and let a crafted archive name run arbitrary shell commands.
  • debian/patches/CVE-2026-46483.patch: use the shellescape(name, 1) form for both :! invocations in runtime/autoload/tar.vim; matches upstream patch 9.2.0479.
  • CVE-2026-46483
• SECURITY UPDATE: code injection via netrw directory history: s:NetrwBookHistSave() serialised each history entry into ~/.vim/.netrwhist by wrapping the value in single quotes with string concatenation, so a directory name containing a single quote closed the literal and injected Vimscript that ran when the history file was sourced on the next netrw start.
  • debian/patches/CVE-2026-47162.patch: encode the value with string() in runtime/autoload/netrw.vim; matches upstream patch 9.2.0495.
  • CVE-2026-47162
• SECURITY UPDATE: code execution through Python omni-completion: pythoncomplete and python3complete rebuilt the buffer's Python code and passed it to exec(), including the import and from statements harvested from the buffer, so invoking omni-completion in a hostile Python file executed arbitrary module-level code.
  • debian/patches/CVE-2026-52858.patch: skip import/from statements unless g:pythoncomplete_allow_import is set, in both runtime/autoload/pythoncomplete.vim and python3complete.vim; matches upstream patches 9.2.0561 and 9.2.0568, the latter being required for the opt-in to take effect at all.
  • CVE-2026-52858
• SECURITY UPDATE: out-of-bounds access when a terminal buffer is snapshotted: the per-cell loop in move_terminal_to_buffer() walked cell.chars[] with no upper bound, and libvterm leaves that array unterminated when a cell uses all VTERM_MAX_CHARS_PER_CELL slots (a base character plus five combining marks), so it read past the array and appended the out-of-bounds values to a buffer sized for far fewer bytes.
  • debian/patches/CVE-2026-52859.patch: bound the loop with i < VTERM_MAX_CHARS_PER_CELL and size the buffer for six 6-byte characters, in src/terminal.c; matches upstream patch 9.2.0565 together with its prerequisite 8.1.0611, without which the bounded loop would still overrun the MB_MAXBYTES-sized buffer.
  • CVE-2026-52859
• SECURITY UPDATE: code execution through Python omni-completion definition headers: Scope.get_code() reproduced def and class headers verbatim in the source handed to exec(), and Python evaluates parameter default values, annotations and base-class expressions at definition time, so crafted headers ran arbitrary code during completion even with imports disabled.
  • debian/patches/CVE-2026-52860.patch: strip default values and annotations from parameters and accept only dotted names as base classes, in both runtime/autoload/pythoncomplete.vim and python3complete.vim; matches upstream patch 9.2.0597.
  • CVE-2026-52860
• SECURITY UPDATE: out-of-bounds write reading a crafted spell file: tree_count_words() and sug_filltree() descended the word trie without bounding the depth, so a deeply nested trie wrote past the ends of their MAXWLEN-sized arridx[], curi[] and wordcount[] arrays.
  • debian/patches/CVE-2026-55693.patch: only descend while depth < MAXWLEN - 1 in both trie walkers, in src/spellfile.c; matches upstream patch 9.2.0653.
  • CVE-2026-55693
• SECURITY UPDATE: code injection when netrw opens a remote file: s:NetrwBrowse() passed bufname() unescaped into an :execute'd "b" command, so a buffer name containing the Ex command separator ran arbitrary…

The updated packages fix security vulnerabilities: Arbitrary Code Execution via Python Omni-Completion in Vim < 9.2.0561. (CVE-2026-52858) Out-of-bounds Read in Terminal Screen Snapshot in Vim < 9.2.0565. (CVE-2026-52859) Arbitrary Code Execution via Python Omni-Completion in Vim < 9.2.0597. (CVE-2026-52860) Out-of-bounds Write in Spell File Word Count in Vim < 9.2.0653. (CVE-2026-55693) Out-of-bounds Write in Spell File Prefix Dump in Vim < 9.2.0662. (CVE-2026-55892) Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename affects Vim < 9.2.0663. (CVE-2026-55895) Out-of-bounds Read in Text Property Count in Vim < 9.2.0670. (CVE-2026-57451) Out-of-bounds Read with libsodium-encrypted Files in Vim < 9.2.0671. (CVE-2026-57452) PowerShell Command Injection in zip.vim via Crafted Archive Entry Names in Vim > 9.1.1783 && Vim < 9.2.0678. (CVE-2026-57453) Out-of-bounds Read with Text Properties in Vim >= 9.2.0320 && Vim < 9.2.0679. (CVE-2026-57454) Out-of-bounds Write in SOFO Soundfolding in Vim < 9.2.0698. (CVE-2026-57455) Arbitrary Code Execution via Python Omni-Completion Docstrings in Vim < 9.2.0699. (CVE-2026-57456)

Root has patched CVE-2026-57456 in the vim package for Root:Debian:11. Multiple fixed versions available.

Root has patched CVE-2026-57456 in the vim package for Root:Debian:12. Multiple fixed versions available.

It was discovered that Vim incorrectly handled path traversal in the zip.vim plugin. An attacker could possibly use this issue to overwrite arbitrary files. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-35177)

It was discovered that Vim incorrectly handled depth tracking when processing spell files. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-55693, CVE-2026-55892)

It was discovered that Vim incorrectly handled filename escaping in the netrw plugin. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-55895)

It was discovered that Vim incorrectly handled length calculations when opening encrypted files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-57452)

Dhruv Vishesh Gupta discovered that Vim incorrectly handled quoting of archive entry names. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-57453)

It was discovered that Vim incorrectly handled bounds checking when translating words through a byte map. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-57455)

Chenyuan Mi discovered that Vim incorrectly handled docstring escaping during Python omni-completion. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-57456)