Strix
26.1K

CVE-2025-27423

HIGHCVSS 7.1/10EPSS 20.77%

Last modified

CVE-2025-27423 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. EPSS estimates a 20.77% chance of exploitation in the next 30 days.

Description

Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the is not sanitized and is taken literally from the tar archive. This allows to execute shell commands via special crafted tar archives. Whether this really happens, depends on the shell being used ('shell' option, which is set using $SHELL). The issue has been fixed as of Vim patch v9.1.1164

Metrics

CVSS 3.1
7.1/10

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS Probability
20.77%

97.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
VimVim>= 9.1.0858, < 9.1.1164
NetappHci Compute NodeAll versions

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2025-27423?
Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the is not sanitized and is taken literally from the tar archive. This allows to execute shell commands via special crafted tar archives. Whether this really happens, depends on the shell being used ('shell' option, which is set using $SHELL). The issue has been fixed as of Vim patch v9.1.1164
How severe is CVE-2025-27423?
CVE-2025-27423 has a CVSS score of 7.1/10 (HIGH severity). The EPSS model estimates a 20.77% probability of exploitation in the next 30 days.
How do I fix CVE-2025-27423?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-27423?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST