CVE-2025-53906

🗓️ 15 Jul 2025 20:52:40Reported by MendType

mend🔗 www.mend.io👁 2 Views

Path traversal in Vim zip.vim plugin allows overwriting arbitrary files with zip archives.

Reporter	Title	Published	Views	Family All 237
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	16 Oct 202511:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Appliance	9 Oct 202610:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Sep 202606:45	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in Vim affects IBM Netezza Appliance	7 Aug 202611:51	–	ibm
attackerkb	CVE-2026-35177	6 Apr 202617:54	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2025-1138)	18 Aug 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0160: vim (ALINUX3-SA-2025:0160)	16 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : vim (ALSA-2025:17715)	13 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : vim (ALSA-2025:17742)	15 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 10 : vim (ALSA-2025:17913)	15 Oct 202500:00	–	nessus

Vulners

Node

vim vimRange9.0.1106–9.1.1551

Source	Link
github	www.github.com/vim/vim/security/advisories/GHSA-r2fw-9cw4-mj86
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53906.json
openwall	www.openwall.com/lists/oss-security/2026/04/01/4
security-tracker	www.security-tracker.debian.org/tracker/CVE-2025-53906
openwall	www.openwall.com/lists/oss-security/2025/07/15/2
github	www.github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-53906

08 Oct 2026 00:04Current

CVSS 42

CVSS 3.14.1

EPSS0.00804

SSVC

Vim zip.vim path traversal overwriting arbitrary files arbitrary command execution