Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vim-enhancedUpgrade vim-minimalUpgrade vim-filesystemUpgrade vim-X11Upgrade vim-common | Jun 4, 2026 | Jun 3, 2026 |
| Alpine Linux | — | Upgrade vim | Apr 7, 2026 | Apr 6, 2026 |
| Amazon_linux_2023 | — | Upgrade xxd-debuginfoUpgrade vim-minimalUpgrade vim-debugsourceUpgrade vim-commonUpgrade vim-filesystemUpgrade vim-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-enhancedUpgrade vim-default-editorUpgrade vim-minimal-debuginfoUpgrade xxdUpgrade vim-data | Jun 23, 2026 | Apr 6, 2026 |
| Oracle_linux | — | Upgrade vim-minimalUpgrade vim-commonUpgrade vim-X11Upgrade vim-enhancedUpgrade vim-filesystem | Jun 5, 2026 | Apr 6, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 27, 2026 | Apr 6, 2026 |
| Redhat_linux | — | Upgrade xxd-debuginfoUpgrade vim-filesystemUpgrade vim-dataUpgrade vim-enhanced-debuginfoUpgrade vim-minimalUpgrade xxdUpgrade vim-common-debuginfoUpgrade vim-enhancedUpgrade vim-X11Upgrade vim-X11-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-commonUpgrade vim-debuginfoUpgrade vim-debugsource | Jun 5, 2026 | Apr 6, 2026 |
| Rocky_linux | — | Upgrade vim-debugsourceUpgrade vim-debuginfoUpgrade vim-common-debuginfoUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-commonUpgrade vim-enhanced-debuginfoUpgrade vim-minimal-debuginfoUpgrade xxd-debuginfoUpgrade vim-X11-debuginfoUpgrade xxdUpgrade vim-X11 | Jun 8, 2026 | Jun 5, 2026 |
| Ubuntu | — | Upgrade vim-gtk (Ubuntu Pro)Upgrade vim-lesstif (Ubuntu Pro)Upgrade xxd (Ubuntu Pro)Upgrade vim-tinyUpgrade xxdUpgrade vim-motifUpgrade vim-athenaUpgrade vim-gtkUpgrade vimUpgrade vim-nox-py2 (Ubuntu Pro)Upgrade vim (Ubuntu Pro)Upgrade vim-common (Ubuntu Pro)Upgrade vim-runtimeUpgrade vim-athena-py2 (Ubuntu Pro)Upgrade vim-nox (Ubuntu Pro)Upgrade vim-gnome (Ubuntu Pro)Upgrade vim-noxUpgrade vim-gtk3-py2 (Ubuntu Pro)Upgrade vim-gtk3 (Ubuntu Pro)Upgrade vim-athena (Ubuntu Pro)Upgrade vim-docUpgrade vim-runtime (Ubuntu Pro)Upgrade vim-commonUpgrade vim-gui-common (Ubuntu Pro)Upgrade vim-gtk3Upgrade vim-gui-commonUpgrade vim-tiny (Ubuntu Pro)Upgrade vim-gnome-py2 (Ubuntu Pro)Upgrade vim-gtk-py2 (Ubuntu Pro) | Apr 28, 2026 | Apr 27, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub