Red Hat Product Security has published an advisory for two path traversal vulnerabilities in Vim (CVE-2025-53905 and CVE-2025-53906) affecting multiple architectures and variants of Red Hat Enterprise Linux 9. These vulnerabilities are categorized under CWE-22 (Path Traversal) and have been rated with moderate severity by Red Hat. The advisory references updated Vim packages that fix these issues. The vulnerabilities allow attackers to potentially access files outside the intended directories via crafted path inputs. The advisory does not provide CVSS scores but directs users to the CVE pages for more details. No exploits are currently known to be active in the wild.

The vulnerabilities allow path traversal attacks in Vim, which could enable unauthorized access to files outside of the intended directory structure. This could lead to information disclosure or unauthorized file manipulation depending on the context in which Vim is used. Red Hat rates the security impact as moderate. There are no known exploits in the wild at this time.

Red Hat has released updated Vim packages that address these path traversal vulnerabilities. Users running affected versions of Red Hat Enterprise Linux 9 should apply the security updates as detailed in Red Hat advisory RHSA-2025:17742 and the referenced article https://access.redhat.com/articles/11258. Applying these official patches is the recommended and effective mitigation. No additional vendor-recommended mitigations are indicated.