Vim Modeline Bypass Vulnerability Let Attackers Execute Arbitrary OS Commands

A high-severity modeline sandbox bypass in Vim (CVE-2026-34982) allows arbitrary OS command execution when a user opens a specially crafted file. The flaw impacts Vim versions earlier than 9.2.0276; the project released a critical patch (v9.2.0276) and recommends immediate updating or disabling modelines (set nomodeline) as a temporary mitigation.