Fedora Account System
Red Hat Associate
Red Hat Customer
Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found in the current buffer through Python's import machinery. Because the buffer's working directory is on sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that package's top-level code as the editing user. This issue has been patched in version 9.2.0561.
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:38509 https://access.redhat.com/errata/RHSA-2026:38509
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:38510 https://access.redhat.com/errata/RHSA-2026:38510
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:38511 https://access.redhat.com/errata/RHSA-2026:38511
This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:55431 https://access.redhat.com/errata/RHSA-2026:55431
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.22 Via RHSA-2026:54769 https://access.redhat.com/errata/RHSA-2026:54769