CVE-2026-52858: Vim: Arbitrary Code Execution via Python Omni-Completion

Synopsis

This is an arbitrary code execution vulnerability in Vim's Python omni-completion feature. An attacker who can place a malicious Python package alongside a file the victim opens in Vim can have that package's code executed automatically when the victim triggers omni-completion, requiring the victim to open the hostile file and invoke the feature. Successful exploitation gives the attacker full code execution as the user running Vim. No fix version has been published yet; HarborGuard is tracking the advisory for patch availability.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must be able to deliver a hostile .py file and sibling package to the victim over the network, or host them in a reachable location the victim pulls from.

• AuthenticationRequired

  A low-privilege account or equivalent access is sufficient - the attacker needs only the ability to place files where the victim will open them, not administrative credentials.

• Victim interactionRequired

  The victim must open the attacker-supplied .py file in Vim and manually trigger Python omni-completion, making this a social-engineering-dependent attack path.

• Attack complexityDetail

  Exploitation requires the specific precondition that a malicious sibling Python package is present on the buffer's working directory path, introducing environmental dependencies beyond the attacker's direct control.

Blast Radius

• The attacker executes arbitrary code as the user running Vim, gaining access to all files, secrets, and credentials readable by that user.
• Environment variables available to the Vim process, including tokens, API keys, and shell configuration, are exposed to the attacker's injected code.
• The attacker can write or overwrite files owned by the victim user, including shell configuration files, SSH authorized_keys, or source code in the working directory.
• The affected host's network access is available to the injected code, enabling outbound connections for data exfiltration or further lateral movement.