CVE-2026-57453

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-57453
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57453.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-57453
Aliases
  • GHSA-x5fg-h5w9-9frf
Downstream
Published
2026-06-25T15:26:48.854Z
Modified
2026-07-08T08:11:36.940354258Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L CVSS Calculator
Summary
Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction
Details

Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell to browse, read, extract, update or delete entries in a zip archive, it builds the PowerShell command by inserting archive entry names that are quoted only for the shell, not for PowerShell. A crafted entry name can break out of the intended string context and cause PowerShell to execute arbitrary commands with the privileges of the user running Vim, triggered by opening, viewing or extracting the archive. This vulnerability is fixed in 9.2.0678.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57453.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-77"
    ]
}
References

Affected packages

Git / github.com/vim/vim

Affected ranges

Type
GIT
Repo
https://github.com/vim/vim
Events
Introduced
368710abcfaadc8370a07cdd58303f2704f10282
Fixed
b2cc9be119d51212bf0d3f2a994c7e517c73f4a9
Fixed
b2cc9be119d51212bf0d3f2a99
Database specific 
{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "9.1.1784"
        },
        {
            "fixed": "9.2.0678"
        }
    ]
}

Affected versions

v9.*
v9.1.1784
v9.1.1785
v9.1.1786
v9.1.1787
v9.1.1788
v9.1.1789
v9.1.1790
v9.1.1791
v9.1.1792
v9.1.1793
v9.1.1794
v9.1.1795
v9.1.1796
v9.1.1797
v9.1.1798
v9.1.1799
v9.1.1800
v9.1.1801
v9.1.1802
v9.1.1803
v9.1.1804
v9.1.1805
v9.1.1806
v9.1.1807
v9.1.1808
v9.1.1809
v9.1.1810
v9.1.1811
v9.1.1812
v9.1.1813
v9.1.1814
v9.1.1815
v9.1.1816
v9.1.1817
v9.1.1818
v9.1.1819
v9.1.1820
v9.1.1821
v9.1.1822
v9.1.1823
v9.1.1824
v9.1.1825
v9.1.1826
v9.1.1827
v9.1.1828
v9.1.1829
v9.1.1830
v9.1.1831
v9.1.1832
v9.1.1833
v9.1.1834
v9.1.1835
v9.1.1836
v9.1.1837
v9.1.1838
v9.1.1839
v9.1.1840
v9.1.1841
v9.1.1842
v9.1.1843
v9.1.1844
v9.1.1845
v9.1.1846
v9.1.1847
v9.1.1848
v9.1.1849
v9.1.1850
v9.1.1851
v9.1.1852
v9.1.1853
v9.1.1854
v9.1.1855
v9.1.1856
v9.1.1857
v9.1.1858
v9.1.1859
v9.1.1860
v9.1.1861
v9.1.1862
v9.1.1863
v9.1.1864
v9.1.1865
v9.1.1866
v9.1.1867
v9.1.1868
v9.1.1869
v9.1.1870
v9.1.1871
v9.1.1872
v9.1.1873
v9.1.1874
v9.1.1875
v9.1.1876
v9.1.1877
v9.1.1878
v9.1.1879
v9.1.1880
v9.1.1881
v9.1.1882
v9.1.1883
v9.1.1884
v9.1.1885
v9.1.1886
v9.1.1887
v9.1.1888
v9.1.1889
v9.1.1890
v9.1.1891
v9.1.1892
v9.1.1893
v9.1.1894
v9.1.1895
v9.1.1896
v9.1.1897
v9.1.1898
v9.1.1899
v9.1.1900
v9.1.1901
v9.1.1902
v9.1.1903
v9.1.1904
v9.1.1905
v9.1.1906
v9.1.1907
v9.1.1908
v9.1.1909
v9.1.1910
v9.1.1911
v9.1.1912
v9.1.1913
v9.1.1914
v9.1.1915
v9.1.1916
v9.1.1917
v9.1.1918
v9.1.1919
v9.1.1920
v9.1.1921
v9.1.1922
v9.1.1923
v9.1.1924
v9.1.1925
v9.1.1926
v9.1.1927
v9.1.1928
v9.1.1929
v9.1.1930
v9.1.1931
v9.1.1932
v9.1.1933
v9.1.1934
v9.1.1935
v9.1.1936
v9.1.1937
v9.1.1938
v9.1.1939
v9.1.1940
v9.1.1941
v9.1.1942
v9.1.1943
v9.1.1944
v9.1.1945
v9.1.1946
v9.1.1947
v9.1.1948
v9.1.1949
v9.1.1950
v9.1.1951
v9.1.1952
v9.1.1953
v9.1.1954
v9.1.1955
v9.1.1956
v9.1.1957
v9.1.1958
v9.1.1959
v9.1.1960
v9.1.1961
v9.1.1962
v9.1.1963
v9.1.1964
v9.1.1965
v9.1.1966
v9.1.1967
v9.1.1968
v9.1.1969
v9.1.1970
v9.1.1971
v9.1.1972
v9.1.1973
v9.1.1974
v9.1.1975
v9.1.1976
v9.1.1977
v9.1.1978
v9.1.1979
v9.1.1980
v9.1.1981
v9.1.1982
v9.1.1983
v9.1.1984
v9.1.1985
v9.1.1986
v9.1.1987
v9.1.1988
v9.1.1989
v9.1.1990
v9.1.1991
v9.1.1992
v9.1.1993
v9.1.1994
v9.1.1995
v9.1.1996
v9.1.1997
v9.1.1998
v9.1.1999
v9.1.2000
v9.1.2001
v9.1.2002
v9.1.2003
v9.1.2004
v9.1.2005
v9.1.2006
v9.1.2007
v9.1.2008
v9.1.2009
v9.1.2010
v9.1.2011
v9.1.2012
v9.1.2013
v9.1.2014
v9.1.2015
v9.1.2016
v9.1.2017
v9.1.2018
v9.1.2019
v9.1.2020
v9.1.2021
v9.1.2022
v9.1.2023
v9.1.2024
v9.1.2025
v9.1.2026
v9.1.2027
v9.1.2028
v9.1.2029
v9.1.2030
v9.1.2031
v9.1.2032
v9.1.2033
v9.1.2034
v9.1.2035
v9.1.2036
v9.1.2037
v9.1.2038
v9.1.2039
v9.1.2040
v9.1.2041
v9.1.2042
v9.1.2043
v9.1.2044
v9.1.2045
v9.1.2046
v9.1.2047
v9.1.2048
v9.1.2049
v9.1.2050
v9.1.2051
v9.1.2052
v9.1.2053
v9.1.2054
v9.1.2055
v9.1.2056
v9.1.2057
v9.1.2058
v9.1.2059
v9.1.2060
v9.1.2061
v9.1.2062
v9.1.2063
v9.1.2064
v9.1.2065
v9.1.2066
v9.1.2067
v9.1.2068
v9.1.2069
v9.1.2070
v9.1.2071
v9.1.2072
v9.1.2073
v9.1.2074
v9.1.2075
v9.1.2076
v9.1.2077
v9.1.2078
v9.1.2079
v9.1.2080
v9.1.2081
v9.1.2082
v9.1.2083
v9.1.2084
v9.1.2085
v9.1.2086
v9.1.2087
v9.1.2088
v9.1.2089
v9.1.2090
v9.1.2091
v9.1.2092
v9.1.2093
v9.1.2094
v9.1.2095
v9.1.2096
v9.1.2097
v9.1.2098
v9.1.2099
v9.1.2100
v9.1.2101
v9.1.2102
v9.1.2103
v9.1.2104
v9.1.2105
v9.1.2106
v9.1.2107
v9.1.2108
v9.1.2109
v9.1.2110
v9.1.2111
v9.1.2112
v9.1.2113
v9.1.2114
v9.1.2115
v9.1.2116
v9.1.2117
v9.1.2118
v9.1.2119
v9.1.2120
v9.1.2121
v9.1.2122
v9.1.2123
v9.1.2124
v9.1.2125
v9.1.2126
v9.1.2127
v9.1.2128
v9.1.2129
v9.1.2130
v9.1.2131
v9.1.2132
v9.1.2133
v9.1.2134
v9.1.2135
v9.1.2136
v9.1.2137
v9.1.2138
v9.1.2139
v9.1.2140
v9.1.2141
v9.1.2142
v9.1.2143
v9.1.2144
v9.1.2145
v9.1.2146
v9.1.2147
v9.1.2148
v9.2.0
v9.2.0000
v9.2.0001
v9.2.0002
v9.2.0003
v9.2.0004
v9.2.0005
v9.2.0006
v9.2.0007
v9.2.0008
v9.2.0009
v9.2.0010
v9.2.0011
v9.2.0012
v9.2.0013
v9.2.0014
v9.2.0015
v9.2.0016
v9.2.0017
v9.2.0018
v9.2.0019
v9.2.0020
v9.2.0021
v9.2.0022
v9.2.0023
v9.2.0024
v9.2.0025
v9.2.0026
v9.2.0027
v9.2.0028
v9.2.0029
v9.2.0030
v9.2.0031
v9.2.0032
v9.2.0033
v9.2.0034
v9.2.0035
v9.2.0036
v9.2.0037
v9.2.0038
v9.2.0039
v9.2.0040
v9.2.0041
v9.2.0042
v9.2.0043
v9.2.0044
v9.2.0045
v9.2.0046
v9.2.0047
v9.2.0048
v9.2.0049
v9.2.0050
v9.2.0051
v9.2.0052
v9.2.0053
v9.2.0054
v9.2.0055
v9.2.0056
v9.2.0057
v9.2.0058
v9.2.0059
v9.2.0060
v9.2.0061
v9.2.0062
v9.2.0063
v9.2.0064
v9.2.0065
v9.2.0066
v9.2.0067
v9.2.0068
v9.2.0069
v9.2.0070
v9.2.0071
v9.2.0072
v9.2.0073
v9.2.0074
v9.2.0075
v9.2.0076
v9.2.0077
v9.2.0078
v9.2.0079
v9.2.0080
v9.2.0081
v9.2.0082
v9.2.0083
v9.2.0084
v9.2.0085
v9.2.0086
v9.2.0087
v9.2.0088
v9.2.0089
v9.2.0090
v9.2.0091
v9.2.0092
v9.2.0093
v9.2.0094
v9.2.0095
v9.2.0096
v9.2.0097
v9.2.0098
v9.2.0099
v9.2.0100
v9.2.0101
v9.2.0102
v9.2.0103
v9.2.0104
v9.2.0105
v9.2.0106
v9.2.0107
v9.2.0108
v9.2.0109
v9.2.0110
v9.2.0111
v9.2.0112
v9.2.0113
v9.2.0114
v9.2.0115
v9.2.0116
v9.2.0117
v9.2.0118
v9.2.0119
v9.2.0120
v9.2.0121
v9.2.0122
v9.2.0123
v9.2.0124
v9.2.0125
v9.2.0126
v9.2.0127
v9.2.0128
v9.2.0129
v9.2.0130
v9.2.0131
v9.2.0132
v9.2.0133
v9.2.0134
v9.2.0135
v9.2.0136
v9.2.0137
v9.2.0138
v9.2.0139
v9.2.0140
v9.2.0141
v9.2.0142
v9.2.0143
v9.2.0144
v9.2.0145
v9.2.0146
v9.2.0147
v9.2.0148
v9.2.0149
v9.2.0150
v9.2.0151
v9.2.0152
v9.2.0153
v9.2.0154
v9.2.0155
v9.2.0156
v9.2.0157
v9.2.0158
v9.2.0159
v9.2.0160
v9.2.0161
v9.2.0162
v9.2.0163
v9.2.0164
v9.2.0165
v9.2.0166
v9.2.0167
v9.2.0168
v9.2.0169
v9.2.0170
v9.2.0171
v9.2.0172
v9.2.0173
v9.2.0174
v9.2.0175
v9.2.0176
v9.2.0177
v9.2.0178
v9.2.0179
v9.2.0180
v9.2.0181
v9.2.0182
v9.2.0183
v9.2.0184
v9.2.0185
v9.2.0186
v9.2.0187
v9.2.0188
v9.2.0189
v9.2.0190
v9.2.0191
v9.2.0192
v9.2.0193
v9.2.0194
v9.2.0195
v9.2.0196
v9.2.0197
v9.2.0198
v9.2.0199
v9.2.0200
v9.2.0201
v9.2.0202
v9.2.0203
v9.2.0204
v9.2.0205
v9.2.0206
v9.2.0207
v9.2.0208
v9.2.0209
v9.2.0210
v9.2.0211
v9.2.0212
v9.2.0213
v9.2.0214
v9.2.0215
v9.2.0216
v9.2.0217
v9.2.0218
v9.2.0219
v9.2.0220
v9.2.0221
v9.2.0222
v9.2.0223
v9.2.0224
v9.2.0225
v9.2.0226
v9.2.0227
v9.2.0228
v9.2.0229
v9.2.0230
v9.2.0231
v9.2.0232
v9.2.0233
v9.2.0234
v9.2.0235
v9.2.0236
v9.2.0237
v9.2.0238
v9.2.0239
v9.2.0240
v9.2.0241
v9.2.0242
v9.2.0243
v9.2.0244
v9.2.0245
v9.2.0246
v9.2.0247
v9.2.0248
v9.2.0249
v9.2.0250
v9.2.0251
v9.2.0252
v9.2.0253
v9.2.0254
v9.2.0255
v9.2.0256
v9.2.0257
v9.2.0258
v9.2.0259
v9.2.0260
v9.2.0261
v9.2.0262
v9.2.0263
v9.2.0264
v9.2.0265
v9.2.0266
v9.2.0267
v9.2.0268
v9.2.0269
v9.2.0270
v9.2.0271
v9.2.0272
v9.2.0273
v9.2.0274
v9.2.0275
v9.2.0276
v9.2.0277
v9.2.0278
v9.2.0279
v9.2.0280
v9.2.0281
v9.2.0282
v9.2.0283
v9.2.0284
v9.2.0285
v9.2.0286
v9.2.0287
v9.2.0288
v9.2.0289
v9.2.0290
v9.2.0291
v9.2.0292
v9.2.0293
v9.2.0294
v9.2.0295
v9.2.0296
v9.2.0297
v9.2.0298
v9.2.0299
v9.2.0300
v9.2.0301
v9.2.0302
v9.2.0303
v9.2.0304
v9.2.0305
v9.2.0306
v9.2.0307
v9.2.0308
v9.2.0309
v9.2.0310
v9.2.0311
v9.2.0312
v9.2.0313
v9.2.0314
v9.2.0315
v9.2.0316
v9.2.0317
v9.2.0318
v9.2.0319
v9.2.0320
v9.2.0321
v9.2.0322
v9.2.0323
v9.2.0324
v9.2.0325
v9.2.0326
v9.2.0327
v9.2.0328
v9.2.0329
v9.2.0330
v9.2.0331
v9.2.0332
v9.2.0333
v9.2.0334
v9.2.0335
v9.2.0336
v9.2.0337
v9.2.0338
v9.2.0339
v9.2.0340
v9.2.0341
v9.2.0342
v9.2.0343
v9.2.0344
v9.2.0345
v9.2.0346
v9.2.0347
v9.2.0348
v9.2.0349
v9.2.0350
v9.2.0351
v9.2.0352
v9.2.0353
v9.2.0354
v9.2.0355
v9.2.0356
v9.2.0357
v9.2.0358
v9.2.0359
v9.2.0360
v9.2.0361
v9.2.0362
v9.2.0363
v9.2.0364
v9.2.0365
v9.2.0366
v9.2.0367
v9.2.0368
v9.2.0369
v9.2.0370
v9.2.0371
v9.2.0372
v9.2.0373
v9.2.0374
v9.2.0375
v9.2.0376
v9.2.0377
v9.2.0378
v9.2.0379
v9.2.0380
v9.2.0381
v9.2.0382
v9.2.0383
v9.2.0384
v9.2.0385
v9.2.0386
v9.2.0387
v9.2.0388
v9.2.0389
v9.2.0390
v9.2.0391
v9.2.0392
v9.2.0393
v9.2.0394
v9.2.0395
v9.2.0396
v9.2.0397
v9.2.0398
v9.2.0399
v9.2.0400
v9.2.0401
v9.2.0402
v9.2.0403
v9.2.0404
v9.2.0405
v9.2.0406
v9.2.0407
v9.2.0408
v9.2.0409
v9.2.0410
v9.2.0411
v9.2.0412
v9.2.0413
v9.2.0414
v9.2.0415
v9.2.0416
v9.2.0417
v9.2.0418
v9.2.0419
v9.2.0420
v9.2.0421
v9.2.0422
v9.2.0423
v9.2.0424
v9.2.0425
v9.2.0426
v9.2.0427
v9.2.0428
v9.2.0429
v9.2.0430
v9.2.0431
v9.2.0432
v9.2.0433
v9.2.0434
v9.2.0435
v9.2.0436
v9.2.0437
v9.2.0438
v9.2.0439
v9.2.0440
v9.2.0441
v9.2.0442
v9.2.0443
v9.2.0444
v9.2.0445
v9.2.0446
v9.2.0447
v9.2.0448
v9.2.0449
v9.2.0450
v9.2.0451
v9.2.0452
v9.2.0453
v9.2.0454
v9.2.0455
v9.2.0456
v9.2.0457
v9.2.0458
v9.2.0459
v9.2.0460
v9.2.0461
v9.2.0462
v9.2.0463
v9.2.0464
v9.2.0465
v9.2.0466
v9.2.0467
v9.2.0468
v9.2.0469
v9.2.0470
v9.2.0471
v9.2.0472
v9.2.0473
v9.2.0474
v9.2.0475
v9.2.0476
v9.2.0477
v9.2.0478
v9.2.0479
v9.2.0480
v9.2.0481
v9.2.0482
v9.2.0483
v9.2.0484
v9.2.0485
v9.2.0486
v9.2.0487
v9.2.0488
v9.2.0489
v9.2.0490
v9.2.0491
v9.2.0492
v9.2.0493
v9.2.0494
v9.2.0495
v9.2.0496
v9.2.0497
v9.2.0498
v9.2.0499
v9.2.0500
v9.2.0501
v9.2.0502
v9.2.0503
v9.2.0504
v9.2.0505
v9.2.0506
v9.2.0507
v9.2.0508
v9.2.0509
v9.2.0510
v9.2.0511
v9.2.0512
v9.2.0513
v9.2.0514
v9.2.0515
v9.2.0516
v9.2.0517
v9.2.0518
v9.2.0519
v9.2.0520
v9.2.0521
v9.2.0522
v9.2.0523
v9.2.0524
v9.2.0525
v9.2.0526
v9.2.0527
v9.2.0528
v9.2.0529
v9.2.0530
v9.2.0531
v9.2.0532
v9.2.0533
v9.2.0534
v9.2.0535
v9.2.0536
v9.2.0537
v9.2.0538
v9.2.0539
v9.2.0540
v9.2.0541
v9.2.0542
v9.2.0543
v9.2.0544
v9.2.0545
v9.2.0546
v9.2.0547
v9.2.0548
v9.2.0549
v9.2.0550
v9.2.0551
v9.2.0552
v9.2.0553
v9.2.0554
v9.2.0555
v9.2.0556
v9.2.0557
v9.2.0558
v9.2.0559
v9.2.0560
v9.2.0561
v9.2.0562
v9.2.0563
v9.2.0564
v9.2.0565
v9.2.0566
v9.2.0567
v9.2.0568
v9.2.0569
v9.2.0570
v9.2.0571
v9.2.0572
v9.2.0573
v9.2.0574
v9.2.0575
v9.2.0576
v9.2.0577
v9.2.0578
v9.2.0579
v9.2.0580
v9.2.0581
v9.2.0582
v9.2.0583
v9.2.0584
v9.2.0585
v9.2.0586
v9.2.0587
v9.2.0588
v9.2.0589
v9.2.0590
v9.2.0591
v9.2.0592
v9.2.0593
v9.2.0594
v9.2.0595
v9.2.0596
v9.2.0597
v9.2.0598
v9.2.0599
v9.2.0600
v9.2.0601
v9.2.0602
v9.2.0603
v9.2.0604
v9.2.0605
v9.2.0606
v9.2.0607
v9.2.0608
v9.2.0609
v9.2.0610
v9.2.0611
v9.2.0612
v9.2.0613
v9.2.0614
v9.2.0615
v9.2.0616
v9.2.0617
v9.2.0618
v9.2.0619
v9.2.0620
v9.2.0621
v9.2.0622
v9.2.0623
v9.2.0624
v9.2.0625
v9.2.0626
v9.2.0627
v9.2.0628
v9.2.0629
v9.2.0630
v9.2.0631
v9.2.0632
v9.2.0633
v9.2.0634
v9.2.0635
v9.2.0636
v9.2.0637
v9.2.0638
v9.2.0639
v9.2.0640
v9.2.0641
v9.2.0642
v9.2.0643
v9.2.0644
v9.2.0645
v9.2.0646
v9.2.0647
v9.2.0648
v9.2.0649
v9.2.0650
v9.2.0651
v9.2.0652
v9.2.0653
v9.2.0654
v9.2.0655
v9.2.0656
v9.2.0657
v9.2.0658
v9.2.0659
v9.2.0660
v9.2.0661
v9.2.0662
v9.2.0663
v9.2.0664
v9.2.0665
v9.2.0666
v9.2.0667
v9.2.0668
v9.2.0669
v9.2.0670
v9.2.0671
v9.2.0672
v9.2.0673
v9.2.0674
v9.2.0675
v9.2.0676
v9.2.0677

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57453.json"