Wind River Support Network

HomeDefectsLIN1021-25373

Acknowledged

LIN1021-25373 : Security Advisory - vim - CVE-2026-42307

Created: May 9, 2026 Updated: May 19, 2026

Found In Version: 10.21.20.2

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the sftp:// or file:// protocol handlers), an attacker can execute arbitrary shell commands with the privileges of the Vim process. This issue has been patched in version 9.2.0383.