{"id":"CVE-2026-57453","summary":"Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction","details":"Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell to browse, read, extract, update or delete entries in a zip archive, it builds the PowerShell command by inserting archive entry names that are quoted only for the shell, not for PowerShell. A crafted entry name can break out of the intended string context and cause PowerShell to execute arbitrary commands with the privileges of the user running Vim, triggered by opening, viewing or extracting the archive. This vulnerability is fixed in 9.2.0678.","aliases":["GHSA-x5fg-h5w9-9frf"],"modified":"2026-07-08T08:11:36.940354258Z","published":"2026-06-25T15:26:48.854Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-77"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57453.json"},"references":[{"type":"WEB","url":"https://github.com/vim/vim/releases/tag/v9.2.0678"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57453.json"},{"type":"ADVISORY","url":"https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57453"},{"type":"FIX","url":"https://github.com/vim/vim/commit/b2cc9be119d51212bf0d3f2a99"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/vim/vim","events":[{"introduced":"368710abcfaadc8370a07cdd58303f2704f10282"},{"fixed":"b2cc9be119d51212bf0d3f2a994c7e517c73f4a9"},{"fixed":"b2cc9be119d51212bf0d3f2a99"}],"database_specific":{"cpe":"cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*","source":["CPE_RANGE","REFERENCES"],"extracted_events":[{"introduced":"9.1.1784"},{"fixed":"9.2.0678"}]}}],"versions":["v9.2.0677","v9.2.0676","v9.2.0675","v9.2.0674","v9.2.0673","v9.2.0672","v9.2.0671","v9.2.0670","v9.2.0669","v9.2.0668","v9.2.0667","v9.2.0666","v9.2.0665","v9.2.0664","v9.2.0663","v9.2.0662","v9.2.0661","v9.2.0660","v9.2.0659","v9.2.0658","v9.2.0657","v9.2.0656","v9.2.0655","v9.2.0654","v9.2.0653","v9.2.0652","v9.2.0651","v9.2.0650","v9.2.0649","v9.2.0648","v9.2.0647","v9.2.0646","v9.2.0645","v9.2.0644","v9.2.0643","v9.2.0642","v9.2.0641","v9.2.0640","v9.2.0639","v9.2.0638","v9.2.0637","v9.2.0636","v9.2.0635","v9.2.0634","v9.2.0633","v9.2.0632","v9.2.0631","v9.2.0630","v9.2.0629","v9.2.0628","v9.2.0627","v9.2.0626","v9.2.0625","v9.2.0624","v9.2.0623","v9.2.0622","v9.2.0621","v9.2.0620","v9.2.0619","v9.2.0618","v9.2.0617","v9.2.0616","v9.2.0615","v9.2.0614","v9.2.0613","v9.2.0612","v9.2.0611","v9.2.0610","v9.2.0609","v9.2.0608","v9.2.0607","v9.2.0606","v9.2.0605","v9.2.0604","v9.2.0603","v9.2.0602","v9.2.0601","v9.2.0600","v9.2.0599","v9.2.0598","v9.2.0597","v9.2.0596","v9.2.0595","v9.2.0594","v9.2.0593","v9.2.0592","v9.2.0591","v9.2.0590","v9.2.0589","v9.2.0588","v9.2.0587","v9.2.0586","v9.2.0585","v9.2.0584","v9.2.0583","v9.2.0582","v9.2.0581","v9.2.0580","v9.2.0579","v9.2.0578","v9.2.0577","v9.2.0576","v9.2.0575","v9.2.0574","v9.2.0573","v9.2.0572","v9.2.0571","v9.2.0570","v9.2.0569","v9.2.0568","v9.2.0567","v9.2.0566","v9.2.0565","v9.2.0564","v9.2.0563","v9.2.0562","v9.2.0561","v9.2.0560","v9.2.0559","v9.2.0558","v9.2.0557","v9.2.0556","v9.2.0555","v9.2.0554","v9.2.0553","v9.2.0552","v9.2.0551","v9.2.0550","v9.2.0549","v9.2.0548","v9.2.0547","v9.2.0546","v9.2.0545","v9.2.0544","v9.2.0543","v9.2.0542","v9.2.0541","v9.2.0540","v9.2.0539","v9.2.0538","v9.2.0537","v9.2.0536","v9.2.0535","v9.2.0534","v9.2.0533","v9.2.0532","v9.2.0531","v9.2.0530","v9.2.0529","v9.2.0528","v9.2.0527","v9.2.0526","v9.2.0525","v9.2.0524","v9.2.0523","v9.2.0522","v9.2.0521","v9.2.0520","v9.2.0519","v9.2.0518","v9.2.0517","v9.2.0516","v9.2.0514","v9.2.0515","v9.2.0513","v9.2.0512","v9.2.0511","v9.2.0510","v9.2.0509","v9.2.0508","v9.2.0507","v9.2.0506","v9.2.0505","v9.2.0504","v9.2.0503","v9.2.0502","v9.2.0501","v9.2.0500","v9.2.0499","v9.2.0498","v9.2.0497","v9.2.0496","v9.2.0495","v9.2.0494","v9.2.0493","v9.2.0492","v9.2.0491","v9.2.0490","v9.2.0489","v9.2.0488","v9.2.0487","v9.2.0486","v9.2.0485","v9.2.0484","v9.2.0483","v9.2.0482","v9.2.0481","v9.2.0480","v9.2.0479","v9.2.0478","v9.2.0477","v9.2.0476","v9.2.0475","v9.2.0474","v9.2.0473","v9.2.0472","v9.2.0471","v9.2.0470","v9.2.0469","v9.2.0468","v9.2.0467","v9.2.0466","v9.2.0465","v9.2.0464","v9.2.0463","v9.2.0462","v9.2.0461","v9.2.0460","v9.2.0459","v9.2.0458","v9.2.0457","v9.2.0456","v9.2.0455","v9.2.0454","v9.2.0453","v9.2.0452","v9.2.0451","v9.2.0450","v9.2.0449","v9.2.0448","v9.2.0447","v9.2.0446","v9.2.0445","v9.2.0444","v9.2.0443","v9.2.0442","v9.2.0441","v9.2.0440","v9.2.0439","v9.2.0438","v9.2.0437","v9.2.0436","v9.2.0435","v9.2.0434","v9.2.0433","v9.2.0432","v9.2.0431","v9.2.0430","v9.2.0429","v9.2.0428","v9.2.0427","v9.2.0426","v9.2.0425","v9.2.0424","v9.2.0423","v9.2.0422","v9.2.0421","v9.2.0420","v9.2.0419","v9.2.0418","v9.2.0417","v9.2.0416","v9.2.0415","v9.2.0414","v9.2.0413","v9.2.0412","v9.2.0411","v9.2.0410","v9.2.0409","v9.2.0408","v9.2.0407","v9.2.0406","v9.2.0405","v9.2.0404","v9.2.0403","v9.2.0402","v9.2.0401","v9.2.0400","v9.2.0399","v9.2.0398","v9.2.0397","v9.2.0396","v9.2.0395","v9.2.0394","v9.2.0393","v9.2.0392","v9.2.0391","v9.2.0390","v9.2.0389","v9.2.0388","v9.2.0387","v9.2.0386","v9.2.0385","v9.2.0384","v9.2.0383","v9.2.0382","v9.2.0381","v9.2.0380","v9.2.0379","v9.2.0378","v9.2.0377","v9.2.0376","v9.2.0375","v9.2.0374","v9.2.0373","v9.2.0372","v9.2.0371","v9.2.0370","v9.2.0369","v9.2.0368","v9.2.0367","v9.2.0366","v9.2.0365","v9.2.0364","v9.2.0363","v9.2.0362","v9.2.0361","v9.2.0360","v9.2.0359","v9.2.0358","v9.2.0357","v9.2.0356","v9.2.0355","v9.2.0354","v9.2.0353","v9.2.0352","v9.2.0351","v9.2.0350","v9.2.0349","v9.2.0348","v9.2.0347","v9.2.0346","v9.2.0345","v9.2.0344","v9.2.0343","v9.2.0342","v9.2.0341","v9.2.0340","v9.2.0339","v9.2.0338","v9.2.0337","v9.2.0336","v9.2.0335","v9.2.0334","v9.2.0333","v9.2.0332","v9.2.0331","v9.2.0330","v9.2.0329","v9.2.0328","v9.2.0327","v9.2.0326","v9.2.0325","v9.2.0324","v9.2.0323","v9.2.0322","v9.2.0321","v9.2.0320","v9.2.0319","v9.2.0318","v9.2.0317","v9.2.0316","v9.2.0315","v9.2.0314","v9.2.0313","v9.2.0312","v9.2.0311","v9.2.0310","v9.2.0309","v9.2.0308","v9.2.0307","v9.2.0306","v9.2.0305","v9.2.0304","v9.2.0303","v9.2.0302","v9.2.0301","v9.2.0300","v9.2.0299","v9.2.0298","v9.2.0297","v9.2.0296","v9.2.0295","v9.2.0294","v9.2.0293","v9.2.0292","v9.2.0291","v9.2.0290","v9.2.0289","v9.2.0288","v9.2.0287","v9.2.0286","v9.2.0285","v9.2.0284","v9.2.0283","v9.2.0282","v9.2.0281","v9.2.0280","v9.2.0279","v9.2.0278","v9.2.0277","v9.2.0276","v9.2.0275","v9.2.0274","v9.2.0273","v9.2.0272","v9.2.0271","v9.2.0270","v9.2.0269","v9.2.0268","v9.2.0267","v9.2.0266","v9.2.0265","v9.2.0264","v9.2.0263","v9.2.0262","v9.2.0261","v9.2.0260","v9.2.0259","v9.2.0258","v9.2.0257","v9.2.0256","v9.2.0255","v9.2.0254","v9.2.0253","v9.2.0252","v9.2.0251","v9.2.0250","v9.2.0249","v9.2.0248","v9.2.0247","v9.2.0246","v9.2.0245","v9.2.0244","v9.2.0243","v9.2.0242","v9.2.0241","v9.2.0240","v9.2.0239","v9.2.0238","v9.2.0237","v9.2.0236","v9.2.0235","v9.2.0234","v9.2.0233","v9.2.0232","v9.2.0231","v9.2.0230","v9.2.0229","v9.2.0228","v9.2.0227","v9.2.0226","v9.2.0225","v9.2.0224","v9.2.0223","v9.2.0222","v9.2.0221","v9.2.0220","v9.2.0219","v9.2.0218","v9.2.0217","v9.2.0216","v9.2.0215","v9.2.0214","v9.2.0213","v9.2.0212","v9.2.0211","v9.2.0210","v9.2.0209","v9.2.0208","v9.2.0207","v9.2.0206","v9.2.0205","v9.2.0204","v9.2.0203","v9.2.0202","v9.2.0201","v9.2.0200","v9.2.0199","v9.2.0198","v9.2.0197","v9.2.0196","v9.2.0195","v9.2.0194","v9.2.0193","v9.2.0192","v9.2.0191","v9.2.0190","v9.2.0189","v9.2.0188","v9.2.0187","v9.2.0186","v9.2.0185","v9.2.0184","v9.2.0183","v9.2.0182","v9.2.0181","v9.2.0180","v9.2.0179","v9.2.0178","v9.2.0177","v9.2.0176","v9.2.0175","v9.2.0174","v9.2.0173","v9.2.0172","v9.2.0171","v9.2.0170","v9.2.0169","v9.2.0168","v9.2.0167","v9.2.0166","v9.2.0165","v9.2.0164","v9.2.0163","v9.2.0162","v9.2.0161","v9.2.0160","v9.2.0159","v9.2.0158","v9.2.0157","v9.2.0156","v9.2.0155","v9.2.0154","v9.2.0153","v9.2.0152","v9.2.0151","v9.2.0150","v9.2.0149","v9.2.0148","v9.2.0147","v9.2.0146","v9.2.0145","v9.2.0144","v9.2.0143","v9.2.0142","v9.2.0141","v9.2.0140","v9.2.0139","v9.2.0138","v9.2.0137","v9.2.0136","v9.2.0135","v9.2.0134","v9.2.0133","v9.2.0132","v9.2.0131","v9.2.0130","v9.2.0129","v9.2.0128","v9.2.0127","v9.2.0126","v9.2.0125","v9.2.0124","v9.2.0123","v9.2.0122","v9.2.0121","v9.2.0120","v9.2.0119","v9.2.0118","v9.2.0117","v9.2.0116","v9.2.0115","v9.2.0114","v9.2.0113","v9.2.0112","v9.2.0111","v9.2.0110","v9.2.0109","v9.2.0108","v9.2.0107","v9.2.0106","v9.2.0105","v9.2.0104","v9.2.0103","v9.2.0102","v9.2.0101","v9.2.0100","v9.2.0099","v9.2.0098","v9.2.0097","v9.2.0096","v9.2.0095","v9.2.0094","v9.2.0093","v9.2.0092","v9.2.0091","v9.2.0090","v9.2.0089","v9.2.0088","v9.2.0087","v9.2.0086","v9.2.0085","v9.2.0084","v9.2.0083","v9.2.0082","v9.2.0081","v9.2.0080","v9.2.0079","v9.2.0078","v9.2.0077","v9.2.0076","v9.2.0075","v9.2.0074","v9.2.0073","v9.2.0072","v9.2.0071","v9.2.0070","v9.2.0069","v9.2.0068","v9.2.0067","v9.2.0066","v9.2.0065","v9.2.0064","v9.2.0063","v9.2.0062","v9.2.0061","v9.2.0060","v9.2.0059","v9.2.0058","v9.2.0057","v9.2.0056","v9.2.0055","v9.2.0054","v9.2.0053","v9.2.0052","v9.2.0051","v9.2.0050","v9.2.0049","v9.2.0048","v9.2.0047","v9.2.0046","v9.2.0045","v9.2.0044","v9.2.0043","v9.2.0042","v9.2.0041","v9.2.0040","v9.2.0039","v9.2.0038","v9.2.0037","v9.2.0036","v9.2.0035","v9.2.0034","v9.2.0033","v9.2.0032","v9.2.0031","v9.2.0030","v9.2.0029","v9.2.0028","v9.2.0027","v9.2.0026","v9.2.0025","v9.2.0024","v9.2.0023","v9.2.0022","v9.2.0021","v9.2.0020","v9.2.0019","v9.2.0018","v9.2.0017","v9.2.0016","v9.2.0015","v9.2.0014","v9.2.0013","v9.2.0012","v9.2.0011","v9.2.0010","v9.2.0009","v9.2.0008","v9.2.0007","v9.2.0006","v9.2.0005","v9.2.0004","v9.2.0003","v9.2.0002","v9.2.0001","v9.2.0000","v9.2.0","v9.1.2148","v9.1.2147","v9.1.2146","v9.1.2145","v9.1.2144","v9.1.2143","v9.1.2142","v9.1.2141","v9.1.2140","v9.1.2139","v9.1.2138","v9.1.2137","v9.1.2136","v9.1.2135","v9.1.2134","v9.1.2133","v9.1.2132","v9.1.2131","v9.1.2130","v9.1.2129","v9.1.2128","v9.1.2127","v9.1.2126","v9.1.2125","v9.1.2124","v9.1.2123","v9.1.2122","v9.1.2121","v9.1.2120","v9.1.2119","v9.1.2118","v9.1.2117","v9.1.2116","v9.1.2115","v9.1.2114","v9.1.2113","v9.1.2112","v9.1.2111","v9.1.2110","v9.1.2109","v9.1.2108","v9.1.2107","v9.1.2106","v9.1.2105","v9.1.2104","v9.1.2103","v9.1.2102","v9.1.2101","v9.1.2100","v9.1.2099","v9.1.2098","v9.1.2097","v9.1.2096","v9.1.2095","v9.1.2094","v9.1.2093","v9.1.2092","v9.1.2091","v9.1.2090","v9.1.2089","v9.1.2088","v9.1.2087","v9.1.2086","v9.1.2085","v9.1.2084","v9.1.2083","v9.1.2082","v9.1.2081","v9.1.2080","v9.1.2079","v9.1.2078","v9.1.2077","v9.1.2076","v9.1.2075","v9.1.2074","v9.1.2073","v9.1.2072","v9.1.2071","v9.1.2070","v9.1.2069","v9.1.2068","v9.1.2067","v9.1.2066","v9.1.2065","v9.1.2064","v9.1.2063","v9.1.2062","v9.1.2061","v9.1.2060","v9.1.2059","v9.1.2058","v9.1.2057","v9.1.2056","v9.1.2055","v9.1.2054","v9.1.2053","v9.1.2052","v9.1.2051","v9.1.2050","v9.1.2049","v9.1.2048","v9.1.2047","v9.1.2046","v9.1.2045","v9.1.2044","v9.1.2043","v9.1.2042","v9.1.2041","v9.1.2040","v9.1.2039","v9.1.2038","v9.1.2037","v9.1.2036","v9.1.2035","v9.1.2034","v9.1.2033","v9.1.2032","v9.1.2031","v9.1.2030","v9.1.2029","v9.1.2028","v9.1.2027","v9.1.2026","v9.1.2025","v9.1.2024","v9.1.2023","v9.1.2022","v9.1.2021","v9.1.2020","v9.1.2019","v9.1.2018","v9.1.2017","v9.1.2016","v9.1.2015","v9.1.2014","v9.1.2013","v9.1.2012","v9.1.2011","v9.1.2010","v9.1.2009","v9.1.2008","v9.1.2007","v9.1.2006","v9.1.2005","v9.1.2004","v9.1.2003","v9.1.2002","v9.1.2001","v9.1.2000","v9.1.1999","v9.1.1998","v9.1.1997","v9.1.1996","v9.1.1995","v9.1.1994","v9.1.1993","v9.1.1992","v9.1.1991","v9.1.1990","v9.1.1989","v9.1.1988","v9.1.1987","v9.1.1986","v9.1.1985","v9.1.1984","v9.1.1983","v9.1.1982","v9.1.1981","v9.1.1980","v9.1.1979","v9.1.1978","v9.1.1977","v9.1.1976","v9.1.1975","v9.1.1974","v9.1.1973","v9.1.1972","v9.1.1971","v9.1.1970","v9.1.1969","v9.1.1968","v9.1.1967","v9.1.1966","v9.1.1965","v9.1.1964","v9.1.1963","v9.1.1962","v9.1.1961","v9.1.1960","v9.1.1959","v9.1.1958","v9.1.1957","v9.1.1956","v9.1.1955","v9.1.1954","v9.1.1953","v9.1.1952","v9.1.1951","v9.1.1950","v9.1.1949","v9.1.1948","v9.1.1947","v9.1.1946","v9.1.1945","v9.1.1944","v9.1.1943","v9.1.1942","v9.1.1941","v9.1.1940","v9.1.1939","v9.1.1938","v9.1.1937","v9.1.1936","v9.1.1935","v9.1.1934","v9.1.1933","v9.1.1932","v9.1.1931","v9.1.1930","v9.1.1929","v9.1.1928","v9.1.1927","v9.1.1926","v9.1.1925","v9.1.1924","v9.1.1923","v9.1.1922","v9.1.1921","v9.1.1920","v9.1.1919","v9.1.1918","v9.1.1917","v9.1.1916","v9.1.1915","v9.1.1914","v9.1.1913","v9.1.1912","v9.1.1911","v9.1.1910","v9.1.1909","v9.1.1908","v9.1.1907","v9.1.1906","v9.1.1905","v9.1.1904","v9.1.1903","v9.1.1902","v9.1.1901","v9.1.1900","v9.1.1899","v9.1.1898","v9.1.1897","v9.1.1896","v9.1.1895","v9.1.1894","v9.1.1893","v9.1.1892","v9.1.1891","v9.1.1890","v9.1.1889","v9.1.1888","v9.1.1887","v9.1.1886","v9.1.1885","v9.1.1884","v9.1.1883","v9.1.1882","v9.1.1881","v9.1.1880","v9.1.1879","v9.1.1878","v9.1.1877","v9.1.1876","v9.1.1875","v9.1.1874","v9.1.1873","v9.1.1872","v9.1.1871","v9.1.1870","v9.1.1869","v9.1.1868","v9.1.1867","v9.1.1866","v9.1.1865","v9.1.1864","v9.1.1863","v9.1.1862","v9.1.1861","v9.1.1860","v9.1.1859","v9.1.1858","v9.1.1857","v9.1.1856","v9.1.1855","v9.1.1854","v9.1.1853","v9.1.1852","v9.1.1851","v9.1.1850","v9.1.1849","v9.1.1848","v9.1.1847","v9.1.1846","v9.1.1845","v9.1.1844","v9.1.1843","v9.1.1842","v9.1.1841","v9.1.1840","v9.1.1839","v9.1.1838","v9.1.1837","v9.1.1836","v9.1.1835","v9.1.1834","v9.1.1833","v9.1.1832","v9.1.1831","v9.1.1830","v9.1.1829","v9.1.1828","v9.1.1827","v9.1.1826","v9.1.1825","v9.1.1824","v9.1.1823","v9.1.1822","v9.1.1821","v9.1.1820","v9.1.1819","v9.1.1818","v9.1.1817","v9.1.1816","v9.1.1815","v9.1.1814","v9.1.1813","v9.1.1812","v9.1.1811","v9.1.1810","v9.1.1809","v9.1.1808","v9.1.1807","v9.1.1806","v9.1.1805","v9.1.1804","v9.1.1803","v9.1.1802","v9.1.1801","v9.1.1800","v9.1.1799","v9.1.1798","v9.1.1797","v9.1.1796","v9.1.1795","v9.1.1794","v9.1.1793","v9.1.1792","v9.1.1791","v9.1.1790","v9.1.1789","v9.1.1788","v9.1.1787","v9.1.1786","v9.1.1785","v9.1.1784"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57453.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L"}]}