CVE-2026-47167— Vim 代码注入漏洞

Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's features/*/ or stories/*/ directories are embedded into a Ruby Kernel.eval argument without sufficient escaping, allowing a crafted pattern in an attacker-controlled repository to execute arbitrary Ruby (and through it arbitrary shell commands) when the user invokes a step-jump mapping ([d, ]d). This issue has been patched in version 9.2.0496.

N/A

对生成代码的控制不恰当(代码注入)

Vim 代码注入漏洞

Vim是Vim开源的一款跨平台的文本编辑器。 Vim 9.2.0496之前版本存在代码注入漏洞，该漏洞源于cucumber文件类型插件中的s:stepmatch函数在具有+ruby支持的Vim构建中，将从仓库下.rb文件读取的步骤定义模式嵌入到Ruby Kernel.eval参数中而未充分转义，可能导致特制模式在用户调用步骤跳转映射时执行任意Ruby代码。

N/A

N/A