Path traversal in Vim - CVE-2025-53906

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU112979

Path traversal in Vim - CVE-2025-53906

Published: July 16, 2025


Vulnerability identifier: #VU112979
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-53906
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to input validation error when processing directory traversal sequences in zip.vim plugin. A remote attacker can trick the victim into opening a specially crafted archive and overwrite arbitrary files on the system, leading to remote code execution. 


Affected software

Vim
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP6
Gentoo Linux
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Desktop Applications Module
Basesystem Module
openSUSE Leap
openEuler
Ubuntu
macOS
Fedora
Financial Transaction Manager for RedHat OpenShift
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
vim (Red Hat package)
vim-filesystem
vim-minimal
vim-enhanced
vim-common
vim-X11
vim
vim-debuginfo
vim-debugsource
vim (Ubuntu package)
vim-data
vim-data-common
gvim-debuginfo
gvim
vim-small-debuginfo
vim-small
app-editors/gvim
app-editors/vim
app-editors/vim-core
IBM Cloud Pak for Business Automation
AppDynamics NodeJS Agent
Cryostat
Red Hat OpenShift Serverless
OpenShift Virtualization
Juniper Junos Space

How to mitigate CVE-2025-53906

Install updates from vendor's website.

Vim - update to 9.1.1551
IBM Cloud Pak for Business Automation - addressed in versions 24.0.0-IF008, 24.0.1-IF006, 25.0.0-IF004
AppDynamics NodeJS Agent - update to 25.12.1
macOS - update to 26.1 25B78
Red Hat OpenShift Serverless - update to 1
Cryostat - update to 4.1.0
OpenShift Virtualization - update to 4.19.17
vim (Red Hat package) - addressed in versions 8.0.1763-21.el8_10, 8.2.2637-20.el9_4.1, 8.2.2637-22.el9_6.1, 9.1.083-5.el10_0.1
vim-filesystem - addressed in versions 8.0.1763-21.0.1, 8.0.1763-23.0.1
vim-minimal - addressed in versions 8.0.1763-21.0.1, 8.0.1763-23.0.1
vim-enhanced - addressed in versions 8.0.1763-21.0.1, 8.0.1763-23.0.1
vim-common - addressed in versions 8.0.1763-21.0.1, 8.0.1763-23.0.1
vim-X11 - addressed in versions 8.0.1763-21.0.1, 8.0.1763-23.0.1
vim - addressed in versions 9.0-35, 9.0.2092-20, 9.0.2092-31
vim-X11 - addressed in versions 9.0-35, 9.0.2092-20, 9.0.2092-31
vim-common - addressed in versions 9.0-35, 9.0.2092-20, 9.0.2092-31
vim-debuginfo - addressed in versions 9.0-35, 9.0.2092-20, 9.0.2092-31
vim-debugsource - addressed in versions 9.0-35, 9.0.2092-20, 9.0.2092-31
vim-enhanced - addressed in versions 9.0-35, 9.0.2092-20, 9.0.2092-31
vim-minimal - addressed in versions 9.0-35, 9.0.2092-20, 9.0.2092-31
vim-filesystem - addressed in versions 9.0-35, 9.0.2092-20, 9.0.2092-31
vim (Ubuntu package) - addressed in versions 2:9.1.0016-1ubuntu7.9, 2:9.1.0967-1ubuntu4.1
vim - addressed in versions 9.1.1552-1.fc41, 9.1.1552-1.fc42
vim-data - addressed in versions 9.1.1629-17.51.1, 9.1.1629-150500.20.33.1, 9.2.0110-17.59.1, 9.2.0110-150000.5.86.1, 9.2.0110-150500.20.43.1
vim-data-common - addressed in versions 9.1.1629-17.51.1, 9.1.1629-150000.5.78.1, 9.1.1629-150500.20.33.1, 9.2.0110-17.59.1, 9.2.0110-150000.5.86.1, 9.2.0110-150500.20.43.1
gvim-debuginfo - addressed in versions 9.1.1629-17.51.1, 9.1.1629-150500.20.33.1, 9.2.0110-17.59.1, 9.2.0110-150000.5.86.1, 9.2.0110-150500.20.43.1
gvim - addressed in versions 9.1.1629-17.51.1, 9.1.1629-150500.20.33.1, 9.2.0110-17.59.1, 9.2.0110-150000.5.86.1, 9.2.0110-150500.20.43.1
vim-debuginfo - addressed in versions 9.1.1629-17.51.1, 9.1.1629-150000.5.78.1, 9.1.1629-150500.20.33.1, 9.2.0110-17.59.1, 9.2.0110-150000.5.86.1, 9.2.0110-150500.20.43.1
vim-debugsource - addressed in versions 9.1.1629-17.51.1, 9.1.1629-150000.5.78.1, 9.1.1629-150500.20.33.1, 9.2.0110-17.59.1, 9.2.0110-150000.5.86.1, 9.2.0110-150500.20.43.1
vim - addressed in versions 9.1.1629-17.51.1, 9.1.1629-150500.20.33.1, 9.2.0110-17.59.1, 9.2.0110-150000.5.86.1, 9.2.0110-150500.20.43.1
vim-small-debuginfo - addressed in versions 9.1.1629-150000.5.78.1, 9.1.1629-150500.20.33.1, 9.2.0110-150000.5.86.1, 9.2.0110-150500.20.43.1
vim-small - addressed in versions 9.1.1629-150000.5.78.1, 9.1.1629-150500.20.33.1, 9.2.0110-150000.5.86.1, 9.2.0110-150500.20.43.1
app-editors/gvim - update to 9.1.1652
app-editors/vim - update to 9.1.1652
app-editors/vim-core - update to 9.1.1652
Juniper Junos Space - update to 26.1R1 Patch V1

External References

Related Security Bulletins