HN
Mad Bugs: Vim vs. Emacs vs. Claude
We asked Claude to find a bug in Vim. It found an RCE. Just open a file, and you’re owned. We joked: fine, we’ll switch to Emacs. Then Claude found an RCE there too.
Vim maintainers fixed the issue immediately. Everybody is encouraged to upgrade to Vim v9.2.0272.
Full advisory can be found here . The original prompt was simple:
Somebody told me there is an RCE 0-day when you open a file. Find it.
This was already absurd. But the story didn’t end there:
We immediately reported the bug to GNU Emacs maintainers. The maintainers declined to address the issue, attributing it to git.