yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2026-51401
Component Overview
Vulnerability Overview
Name
CVE-2026-51401
Source
NVD (
link
)
Debian (
link
)
Description
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c
CWEs
CWE-94
Published Date
Aug 4, 2026
Updated Date
Sep 4, 2026
Workaround
-
Advisories
https://gist.github.com/jiejiaodedengdai/ff5d34a523167e09b7d8330cc9f5d4e5#file-vim-os_vms-cves-md
Third Party Advisory
https://github.com/vim/vim
Product
https://github.com/vim/vim/blob/master/src/os_vms.c
Product
Analysis
#
Affected Component
Analysis
vim
Exploitable
Vulnerability Ratings
#
7.7
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
vim
buildroot
2025.02.x
9.2.0943
Not Affected
vim
buildroot
master
9.2.0943
Not Affected
vim
openwrt
master
9.2.1014-r1
Not Affected
vim
openwrt
openwrt-25.12
9.2.1014-r1
Not Affected
vim
yocto
master
9.2.0993
Not Affected
vim-tiny
yocto
master
9.2.0993
Not Affected
vim
yocto
scarthgap
9.1.1683
Exploitable