CVE-2026-51400

Summary

The flaw allows a local attacker to execute arbitrary code through the vms_fixfilename() function in Vim versions up to 9.2.0389, posing a significant security risk.

Exploitability

Exploitation requires access to the affected system and knowledge of the specific vulnerability; preconditions include running an unpatched version of Vim.

Blast radius

If exploited, this could lead to full compromise of the affected system, allowing attackers to run arbitrary code with the privileges of the user running Vim.

Prioritized remediation

Update to a patched version of Vim or apply vendor-provided patches immediately.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.