CVE-2025-66476

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-66476
Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves external commands by searching the current working directory before system paths. When Vim invokes tools such as findstr for :grep, external commands or filters via :!, or compiler/:make commands, it may inadvertently run a malicious executable present in the same directory as the file being edited. The issue affects Vim for Windows prior to version 9.1.1947.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/vim/vim/commit/083ec6d9a3b7b09006e0ce69ac802597d25 Patch
https://github.com/vim/vim/releases/tag/v9.1.1947 Release Notes
https://github.com/vim/vim/security/advisories/GHSA-g77q-xrww-p834 Patch Vendor Advisory
http://www.openwall.com/lists/oss-security/2025/12/02/5 Mailing List Patch Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

30 Jan 2026, 18:50

Type Values Removed Values Added
First Time Microsoft
Vim vim
Vim
Microsoft windows
References () https://github.com/vim/vim/commit/083ec6d9a3b7b09006e0ce69ac802597d25 - () https://github.com/vim/vim/commit/083ec6d9a3b7b09006e0ce69ac802597d25 - Patch
References () https://github.com/vim/vim/releases/tag/v9.1.1947 - () https://github.com/vim/vim/releases/tag/v9.1.1947 - Release Notes
References () https://github.com/vim/vim/security/advisories/GHSA-g77q-xrww-p834 - () https://github.com/vim/vim/security/advisories/GHSA-g77q-xrww-p834 - Patch, Vendor Advisory
References () http://www.openwall.com/lists/oss-security/2025/12/02/5 - () http://www.openwall.com/lists/oss-security/2025/12/02/5 - Mailing List, Patch, Third Party Advisory
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*

03 Dec 2025, 01:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2025/12/02/5 -

02 Dec 2025, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-12-02 22:16

Updated : 2026-01-30 18:50

NVD link : CVE-2025-66476

Mitre link : CVE-2025-66476

CVE.ORG link : CVE-2025-66476

JSON object : View

Products Affected

microsoft

  • windows

vim

  • vim
CWE
CWE-427

Uncontrolled Search Path Element