CVE-2026-55895 | Vim up to 9.2.662 netrw.vim NetrwLocalRmFile os command injection

June 25, 2026 Yanac

A vulnerability classified as critical was found in Vim up to 9.2.662. The affected element is the function NetrwLocalRmFile of the file runtime/pack/dist/opt/netrw/autoload/netrw.vim. Such manipulation leads to os command injection.

This vulnerability is referenced as CVE-2026-55895. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More