Skip to main content

Suse CVE-2026-34714

| EUVD-2026-17160 CRITICAL
OS Command Injection (CWE-78)
2026-03-30 mitre GHSA-mfxw-q267-mgp6
RCE Command Injection Suse
9.2
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.2 CRITICAL
AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
SUSE
CRITICAL
qualitative
Red Hat
8.6 HIGH
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
Low

Lifecycle Timeline

4
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
EUVD ID Assigned
Mar 30, 2026 - 18:45 euvd
EUVD-2026-17160
Analysis Generated
Mar 30, 2026 - 18:45 vuln.today
CVE Published
Mar 30, 2026 - 18:27 nvd
CRITICAL 9.2

DescriptionCVE.org

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.

AnalysisAI

{expr} injection in tabpanel components lacking the P_MLE flag. This unauthenticated local attack requires no user interaction beyond opening the file, with CVSS 9.2 (Critical) reflecting scope change and high confidentiality/integrity impact. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Craft malicious file with %{expr} injection
Exploit
User opens file in Vim
Execution
Tabpanel processes expression without validation
Impact
Arbitrary code executes with user privileges
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The victim must open a crafted file in Vim before version 9.2.0272. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment This vulnerability represents a critical real-world threat despite the local attack vector (AV:L). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker crafts a malicious text file (config.yaml, script.sh, or README.md) containing embedded %{expr} injection payloads within tabpanel metadata or formatting directives. The file is distributed via software repositories, email attachments, or compromised documentation sites. …
Remediation Upgrade immediately to Vim version 9.2.0272 or later, released by the Vim project to address this vulnerability (https://github.com/vim/vim/releases/tag/v9.2.0272). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Inventory all Vim installations and identify versions prior to 9.2.0272; communicate critical patch availability to users and restrict opening untrusted files pending update. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

Vendor StatusVendor

Debian

vim
Release Status Fixed Version Urgency
bullseye vulnerable 2:8.2.2434-3+deb11u1 -
bullseye (security) vulnerable 2:8.2.2434-3+deb11u3 -
bookworm vulnerable 2:9.0.1378-2+deb12u2 -
trixie vulnerable 2:9.1.1230-2 -
forky, sid vulnerable 2:9.2.0218-1 -
(unstable) fixed (unfixed) -

SUSE

Severity: Critical
Product Status
Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.162 Affected
Container suse/sl-micro/6.0/toolbox:13.2-9.95 Affected
Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.91 Affected
Container suse/sle-micro-rancher/5.2:latest Affected
Container suse/sle-micro/5.2/toolbox:14.2-7.11.272 Affected

Share

CVE-2026-34714 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy