Vulnpedia
← All CVEs

CVE-2025-53905

MEDIUM 4.1 ALL-YEARS

Published 2025-07-15 · Last modified 2025-11-04 · GitHub_M · NVD: Modified

Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. However, successfully exploitation can lead to overwriting sensitive files or placing executable code in privileged locations, depending on the permissions of the process editing the archive. The victim must edit such a file using Vim which will reveal the filename and the file content, a careful user may suspect some strange things going on. Successful exploitation could results in the ability to execute arbitrary commands on the underlying operating system. Version 9.1.1552 contains a patch for the vulnerability.

LIMITED SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.3%chance of exploitation in 30 days · 24th percentile

○ In CISA KEV○ Catalogued PoC◆ SSVC: exploitation poc, automatable no

Impact if exploited

4.1CVSS 3.1 · MEDIUM · CNA

  • ConfidentialityNone
  • IntegrityLow
  • AvailabilityLow

What an attacker needs

  • ⚠Access: Requires local access to the host
  • ✓Privileges: No account or privileges required
  • ⚠User interaction: A user must take an action (click / open a file)
  • ⚠Complexity: Needs a race window or specific setup

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Vim

Products Vim

Weakness (CWE)

  • CWE-22: : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L

References and research data (JSON)

Vendor product assessments

Showing 32 of 440 vendor product statements; 408 omitted. Read the full vendor advisory.

  • vim-X11-2:9.1.083-5.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0.1?arch=aarch64&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • xxd-2:9.1.083-5.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0.1?arch=aarch64&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-enhanced-debuginfo-2:9.1.083-6.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_1?arch=ppc64le&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-debuginfo-2:8.0.1763-21.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_10?arch=ppc64le&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-common-debuginfo-2:8.2.2637-20.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4.1?arch=ppc64le&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-common-2:8.2.2637-22.el9_6.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6.1?arch=ppc64le&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-X11-debuginfo-2:8.2.2637-23.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_7?arch=ppc64le&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-X11-debuginfo-2:9.1.083-5.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0.1?arch=ppc64le&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-X11-debuginfo-2:9.1.083-6.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_1?arch=s390x&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-X11-debuginfo-2:8.0.1763-21.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_10?arch=x86_64&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-common-debuginfo-2:8.2.2637-20.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4.1?arch=x86_64&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-debuginfo-2:8.2.2637-22.el9_6.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6.1?arch=ppc64le&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-debugsource-2:8.2.2637-23.el9_7.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_7?arch=aarch64&epoch=2

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c02e59d4a674b377b9e8c45b92c652c864ecf8c06283d9d228dc3866fa76a622_arm64 as a component of Red Hat Insights proxy 1.5 · fixed

    Vendor assessment for this product only.

    pkg:oci/insights-proxy-container-rhel9@sha256%3Ac02e59d4a674b377b9e8c45b92c652c864ecf8c06283d9d228dc3866fa76a622?arch=arm64&repository_url=registry.redhat.io/insights-proxy&tag=1.5.8-1762789260

    • vendor fix: The Insights proxy container image provided here is downloaded by the Red Hat Insights proxy product RPM. Before applying this update, make sure all previously released errata relevant to your system have been applied. Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-X11 as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/vim-X11

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-common as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/vim-common

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-enhanced as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/vim-enhanced

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-filesystem as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/vim-filesystem

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-minimal as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/vim-minimal

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim.src as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/vim?arch=src

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-X11 as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/vim-X11

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-common as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/vim-common

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-enhanced as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/vim-enhanced

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-filesystem as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/vim-filesystem

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim-minimal as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/vim-minimal

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • vim.src as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/vim?arch=src

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • no fix planned: Out of support scope
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4 · known affected

    Vendor assessment for this product only.

    pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · known affected

    Vendor assessment for this product only.

    pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9

    • workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Fix deferred
    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • registry.redhat.io/discovery/discovery-server-rhel9@sha256:54d0aab9e86766954949e7a5a11fb29b6b1c463ebb5ba0fb46b2d0f108753208_amd64 as a component of Red Hat Discovery 2 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/discovery-server-rhel9@sha256%3A54d0aab9e86766954949e7a5a11fb29b6b1c463ebb5ba0fb46b2d0f108753208?arch=amd64&repository_url=registry.redhat.io/discovery&tag=2.3.0-1760553895

    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • registry.redhat.io/discovery/discovery-server-rhel9@sha256:97a1bb076f7f29a5f2b80c4724cb27c4e87f89c2d73a7719c44dc8c044329503_amd64 as a component of Red Hat Discovery 2 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/discovery-server-rhel9@sha256%3A97a1bb076f7f29a5f2b80c4724cb27c4e87f89c2d73a7719c44dc8c044329503?arch=amd64&repository_url=registry.redhat.io/discovery&tag=2.4.0-1763596485

    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • registry.redhat.io/discovery/discovery-server-rhel9@sha256:b4683720677a1e45efbfd291d8b130b530642221e8a55a49e931e1b8b2c81ac3_arm64 as a component of Red Hat Discovery 2 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/discovery-server-rhel9@sha256%3Ab4683720677a1e45efbfd291d8b130b530642221e8a55a49e931e1b8b2c81ac3?arch=arm64&repository_url=registry.redhat.io/discovery&tag=2.4.0-1763596485

    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00
  • registry.redhat.io/discovery/discovery-server-rhel9@sha256:f4f0ef1497a7cde32f6507f6805050a33ecb95b93bb7ad6bd0544edd3ef19af2_arm64 as a component of Red Hat Discovery 2 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/discovery-server-rhel9@sha256%3Af4f0ef1497a7cde32f6507f6805050a33ecb95b93bb7ad6bd0544edd3ef19af2?arch=arm64&repository_url=registry.redhat.io/discovery&tag=2.3.0-1760553895

    Red Hat · CVE-2025-53905 · Updated 2026-09-01T11:53:20+00:00

Known Affected Software Configurations

VendorProductVersion range
VimVim< 9.1.1552

All CVSS metrics

  • MEDIUM 4.1 v3.1 · CNA Primary
    CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L
  • MEDIUM 4.1 v3.1 · NVD Secondary
    CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L

References

Exploit-tagged references (not proof of a PoC)

Patches & mitigations

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS