VULNERABILITY INTELLIGENCE

CVE-2019-20807

CVSS score5.3 MEDIUM

EPSS probability0.49%

CISA KEVNot currently listed

Published2020-05-28

Last modified2026-06-17

Description

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).