CVE-2026-73073 | Vim up to 9.2.0844 Omni-Completion ccomplete.vim StructMembers os command injection

August 18, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Vim. This affects the function StructMembers of the file runtime/autoload/ccomplete.vim of the component Omni-Completion. Such manipulation leads to os command injection.

This vulnerability is listed as CVE-2026-73073. The attack must be carried out locally. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More