Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. However, successfully exploitation can lead to overwriting sensitive files or placing executable code in privileged locations, depending on the permissions of the process editing the archive. The victim must edit such a file using Vim which will reveal the filename and the file content, a careful user may suspect some strange things going on. Successful exploitation could results in the ability to execute arbitrary commands on the underlying operating system. Version 9.1.1552 contains a patch for the vulnerability.

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in     Vims tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar     archives. Impact is low because this exploit requires direct user interaction. However, successfully     exploitation can lead to overwriting sensitive files or placing executable code in privileged locations,     depending on the permissions of the process editing the archive. The victim must edit such a file using     Vim which will reveal the filename and the file content, a careful user may suspect some strange things     going on. Successful exploitation could results in the ability to execute arbitrary commands on the     underlying operating system. Version 9.1.1552 contains a patch for the vulnerability.(CVE-2025-53905)

    Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in     Vims zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip     archives. Impact is low because this exploit requires direct user interaction. However, successfully     exploitation can lead to overwriting sensitive files or placing executable code in privileged locations,     depending on the permissions of the process editing the archive. The victim must edit such a file using     Vim which will reveal the filename and the file content, a careful user may suspect some strange things     going on. Successful exploitation could results in the ability to execute arbitrary commands on the     underlying operating system. Version 9.1.1551 contains a patch for the vulnerability.(CVE-2025-53906)

Tenable has extracted the preceding description block directly from the EulerOS vim security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:17913 advisory.

    * vim: Vim path traversal (CVE-2025-53906)

    * vim: Vim path traversial (CVE-2025-53905)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:17742 advisory.

    * vim: Vim path traversal (CVE-2025-53906)

    * vim: Vim path traversial (CVE-2025-53905)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0160 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2025-53905:
    Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in     Vims tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar     archives. Impact is low because this exploit requires direct user interaction. However, successfully     exploitation can lead to overwriting sensitive files or placing executable code in privileged locations,     depending on the permissions of the process editing the archive. The victim must edit such a file using     Vim which will reveal the filename and the file content, a careful user may suspect some strange things     going on. Successful exploitation could results in the ability to execute arbitrary commands on the     underlying operating system. Version 9.1.1552 contains a patch for the vulnerability.

    CVE-2025-53906:
    Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in     Vims zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip     archives. Impact is low because this exploit requires direct user interaction. However, successfully     exploitation can lead to overwriting sensitive files or placing executable code in privileged locations,     depending on the permissions of the process editing the archive. The victim must edit such a file using     Vim which will reveal the filename and the file content, a careful user may suspect some strange things     going on. Successful exploitation could results in the ability to execute arbitrary commands on the     underlying operating system. Version 9.1.1551 contains a patch for the vulnerability.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17913 advisory.

    - RHEL-113550 CVE-2025-53906 vim: Vim path traversal

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:17913 advisory.

    * vim: Vim path traversal (CVE-2025-53906)
      * vim: Vim path traversial (CVE-2025-53905)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:17742 advisory.

    * vim: Vim path traversal (CVE-2025-53906)
      * vim: Vim path traversial (CVE-2025-53905)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17913 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim path traversal (CVE-2025-53906)

    * vim: Vim path traversial (CVE-2025-53905)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17742 advisory.

    - RHEL-112006 CVE-2025-53905 vim: Vim path traversial
    - RHEL-112010 CVE-2025-53906 vim: Vim path traversal

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:17715 advisory.

    * vim: Vim path traversal (CVE-2025-53906)
      * vim: Vim path traversial (CVE-2025-53905)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17742 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim path traversal (CVE-2025-53906)

    * vim: Vim path traversial (CVE-2025-53905)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:17715 advisory.

    * vim: Vim path traversal (CVE-2025-53906)

    * vim: Vim path traversial (CVE-2025-53905)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in     Vims zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip     archives. Impact is low because this exploit requires direct user interaction. However, successfully     exploitation can lead to overwriting sensitive files or placing executable code in privileged locations,     depending on the permissions of the process editing the archive. The victim must edit such a file using     Vim which will reveal the filename and the file content, a careful user may suspect some strange things     going on. Successful exploitation could results in the ability to execute arbitrary commands on the     underlying operating system. Version 9.1.1551 contains a patch for the vulnerability.(CVE-2025-53906)

    Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in     Vims tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar     archives. Impact is low because this exploit requires direct user interaction. However, successfully     exploitation can lead to overwriting sensitive files or placing executable code in privileged locations,     depending on the permissions of the process editing the archive. The victim must edit such a file using     Vim which will reveal the filename and the file content, a careful user may suspect some strange things     going on. Successful exploitation could results in the ability to execute arbitrary commands on the     underlying operating system. Version 9.1.1552 contains a patch for the vulnerability.(CVE-2025-53905)

Tenable has extracted the preceding description block directly from the EulerOS vim security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-17715 advisory.

    - RHEL-112003 CVE-2025-53905 vim: Vim path traversial
    - RHEL-112007 CVE-2025-53906 vim: Vim path traversal
    - CVE-2022-1785 vim: Out-of-bounds Write
    - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
    - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c
    - CVE-2022-1621 vim: heap buffer overflow
    - CVE-2022-1629 vim: buffer over-read

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17715 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim path traversal (CVE-2025-53906)

    * vim: Vim path traversial (CVE-2025-53905)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17644 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim path traversal (CVE-2025-53906)

    * vim: Vim path traversial (CVE-2025-53905)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03299-1 advisory.

    Updated to 9.1.1629:
    - CVE-2025-53905: Fixed malicious tar archive may causing a path traversal in Vims tar.vim plugin     (bsc#1246604)
    - CVE-2025-53906: Fixed malicious zip archive may causing a path traversal in Vims zip (bsc#1246602)
    - CVE-2025-55157: Fixed use-after-free in internal tuple reference management (bsc#1247938)
    - CVE-2025-55158: Fixed double-free in internal typed value (typval_T) management (bsc#1247939)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03300-1 advisory.

    Updated to 9.1.1629:
    - CVE-2025-53905: Fixed malicious tar archive may causing a path traversal in Vims tar.vim plugin     (bsc#1246604)
    - CVE-2025-53906: Fixed malicious zip archive may causing a path traversal in Vims zip (bsc#1246602)
    - CVE-2025-55157: Fixed use-after-free in internal tuple reference management (bsc#1247938)
    - CVE-2025-55158: Fixed double-free in internal typed value (typval_T) management (bsc#1247939)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7748-1 advisory.

    It was discovered that Vim incorrectly handled file extraction when opening maliciously crafted zip or tar     archives. An attacker could possibly use this issue to create or overwrite files on the system and execute     arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in     Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1552 contains a patch for the vulnerability. (CVE-2025-53905)

Note that Nessus relies on the presence of the package as reported by the vendor.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1138 advisory.

    Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in     Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1552 contains a patch for the vulnerability. (CVE-2025-53905)

    Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in     Vim's zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1551 contains a patch for the vulnerability. (CVE-2025-53906)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of vim installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-53905 advisory.

  - Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in     Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user May suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1552 contains a patch for the vulnerability. (CVE-2025-53905)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-53905 advisory.

  - Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in     Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user May suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1552 contains a patch for the vulnerability. (CVE-2025-53905)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cc42339ef7 advisory.

    The newest upstream commit

    Security fixes for CVE-2025-53906, CVE-2025-53905

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9395406660 advisory.

    The newest upstream commit

    Security fixes for CVE-2025-53906, CVE-2025-53905

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
271355	EulerOS 2.0 SP13 : vim (EulerOS-SA-2025-2282)	Nessus	Huawei Local Security Checks	medium
271319	EulerOS 2.0 SP13 : vim (EulerOS-SA-2025-2314)	Nessus	Huawei Local Security Checks	medium
270752	RockyLinux 10 : vim (RLSA-2025:17913)	Nessus	Rocky Linux Local Security Checks	medium
270749	RockyLinux 9 : vim (RLSA-2025:17742)	Nessus	Rocky Linux Local Security Checks	medium
270631	Alibaba Cloud Linux 3 : 0160: vim (ALINUX3-SA-2025:0160)	Nessus	Alibaba Cloud Linux Local Security Checks	medium
270415	Oracle Linux 10 : vim (ELSA-2025-17913)	Nessus	Oracle Linux Local Security Checks	medium
270411	AlmaLinux 10 : vim (ALSA-2025:17913)	Nessus	Alma Linux Local Security Checks	medium
270410	AlmaLinux 9 : vim (ALSA-2025:17742)	Nessus	Alma Linux Local Security Checks	medium
270340	RHEL 10 : vim (RHSA-2025:17913)	Nessus	Red Hat Local Security Checks	medium
270136	Oracle Linux 9 : vim (ELSA-2025-17742)	Nessus	Oracle Linux Local Security Checks	medium
270129	AlmaLinux 8 : vim (ALSA-2025:17715)	Nessus	Alma Linux Local Security Checks	medium
270117	RHEL 9 : vim (RHSA-2025:17742)	Nessus	Red Hat Local Security Checks	medium
270103	RockyLinux 8 : vim (RLSA-2025:17715)	Nessus	Rocky Linux Local Security Checks	medium
270038	EulerOS 2.0 SP11 : vim (EulerOS-SA-2025-2251)	Nessus	Huawei Local Security Checks	medium
270008	EulerOS 2.0 SP11 : vim (EulerOS-SA-2025-2219)	Nessus	Huawei Local Security Checks	medium
269953	Oracle Linux 8 : vim (ELSA-2025-17715)	Nessus	Oracle Linux Local Security Checks	medium
269945	RHEL 8 : vim (RHSA-2025:17715)	Nessus	Red Hat Local Security Checks	medium
269798	RHEL 9 : vim (RHSA-2025:17644)	Nessus	Red Hat Local Security Checks	medium
265785	SUSE SLES12 Security Update : vim (SUSE-SU-2025:03299-1)	Nessus	SuSE Local Security Checks	medium
265773	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2025:03300-1)	Nessus	SuSE Local Security Checks	medium
265093	Ubuntu 24.04 LTS / 25.04 : Vim vulnerabilities (USN-7748-1)	Nessus	Ubuntu Local Security Checks	medium
259853	Linux Distros Unpatched Vulnerability : CVE-2025-53905	Nessus	Misc.	medium
251378	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2025-1138)	Nessus	Amazon Linux Local Security Checks	medium
244816	Azure Linux 3.0 Security Update: vim (CVE-2025-53905)	Nessus	Azure Linux Local Security Checks	medium
244795	CBL Mariner 2.0 Security Update: vim (CVE-2025-53905)	Nessus	MarinerOS Local Security Checks	medium
242290	Fedora 41 : vim (2025-cc42339ef7)	Nessus	Fedora Local Security Checks	medium
242211	Fedora 42 : vim (2025-9395406660)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2025-53905

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium