CyberRota Analysis
AI-GeneratedVim versions prior to 9.2.0845 are vulnerable to a command injection flaw in the StructMembers() function, which improperly handles typeref or typename values from tags files. This vulnerability allows attackers to execute arbitrary commands on the operating system when users utilize C omni-completion with specific inputs. Developers and system administrators using affected versions should prioritize upgrading to the patched version to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.