CyberRota Analysis
AI-GeneratedVim's PHP omni-completion script prior to version 9.2.0736 is vulnerable to arbitrary command execution due to improper handling of user input, allowing attackers to craft PHP files that can execute arbitrary operating system commands when opened. This high-severity vulnerability poses a significant risk to users who utilize Vim for PHP development, particularly in environments where untrusted code may be executed. Organizations and developers using affected versions should prioritize upgrading to the patched version to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search() pattern that is run via win_execute() without escaping. A name containing a single quote can terminate the search() string argument early, and because the bar is honored as an Ex command separator, the remainder of the name is run as Ex commands; via the :! command this allows arbitrary operating-system command execution when a victim opens a crafted PHP file and invokes omni-completion. This issue is fixed in version 9.2.0736.
Related CVEs
Other vulnerabilities affecting the same vendor(s)