Critical Security Update for vim and vim-common: CVE-2026-73073
Summary
RHSA-2026:75768: Red Hat Security Advisory: vim security update. Affects vim-common versions < 2:8.2.2637-26.el9_8.23. Fixed in 2:8.2.2637-26.el9_8.23. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Vim is a highly configurable text editor built to enable efficient text editing. It is widely used by developers and system administrators for its powerful features and extensibility. The vim-common package includes shared files for Vim, which are essential for its operation. This vulnerability affects both vim and vim-common, potentially exposing users to security risks.
Vulnerability Detail
The vulnerability identified as CVE-2026-73073 allows for potential unauthorized access and manipulation of files due to improper handling of user input. This could lead to data breaches or system compromise, as attackers may exploit this flaw to execute arbitrary code or gain elevated privileges. The severity of this vulnerability is underscored by its CVSS score of 7.3, indicating a high risk to affected systems.
How To Fix
Minimum fixed version
2:8.2.2637-26.el9_8.23
This is the first release that contains the fix.
sudo dnf update vim-commonTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the vim editor or avoid using it until the update is applied. Additionally, consider using alternative text editors that do not have this vulnerability until the patch is installed.
Conclusion
The CVE-2026-73073 vulnerability in vim and vim-common poses significant security risks to users. It is crucial to apply the necessary updates to mitigate these risks. Users are encouraged to stay informed and utilize tools like Vulert for real-time monitoring of open-source vulnerabilities.
See every vulnerability recorded for vim-common →
FAQ
CVE-2026-73073 is a security vulnerability in the vim and vim-common packages that could allow unauthorized access and manipulation of files.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If you cannot update immediately, consider using alternative text editors and limit access to vim until the patch is applied.
The CVSS score of CVE-2026-73073 is 7.3, indicating a high severity level.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:75768.json.
Related vulnerabilities
Recent vulnerabilities recorded for vim-common.
