CVE-2026-35177 | vim up to 9.2.0279 zip.vim Plugin path traversal (GHSA-jc86-w7vm-8p24)

A vulnerability categorized as critical has been discovered in vim up to 9.2.0279. The affected element is an unknown function of the component zip.vim Plugin. Executing a manipulation can lead to path traversal.

This vulnerability is handled as CVE-2026-35177. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.