CVE-2026-51401 | Vim up to 9.2.0389 vim/src/os_vms.c vms_fixfilename code injection

A vulnerability identified as problematic has been detected in Vim up to 9.2.0389. The impacted element is the function vms_fixfilename of the file vim/src/os_vms.c. This manipulation causes code injection.

This vulnerability is registered as CVE-2026-51401. The attack needs to be launched locally. No exploit is available.