Vim CVE-2026-41411

Upgrade to Vim 9.2.0357 or later from https://github.com/vim/vim/releases/tag/v9.2.0357. Patch details are available in the security advisory at https://github.com/vim/vim/security/advisories/GHSA-cwgx-gcj7-6qh8. As an interim compensating control, users should audit tags files for backtick syntax (command substitution patterns) before opening or navigating tags, particularly from untrusted sources or public repositories. Additionally, restricting write access to tags files to trusted users and scanning version control systems for malicious tags entries can reduce attack surface. Note that disabling tag functionality entirely (via setting 'tags=' to empty) eliminates the vulnerability but removes tag-jump convenience features.