Red Hat Product Security released an advisory (RHSA-2025:17715) for two path traversal vulnerabilities in Vim (CVE-2025-53905 and CVE-2025-53906) affecting Red Hat Enterprise Linux 8 and its variants on multiple architectures including x86_64, s390x, ppc64le, and aarch64. The vulnerabilities are categorized under CWE-22 (Path Traversal). The advisory rates the security impact as moderate. Updated Vim packages have been made available to fix these issues. No CVSS score is provided in the advisory, and no known exploits in the wild have been reported. The advisory includes detailed package updates and references for remediation.

The vulnerabilities could allow unauthorized path traversal within the Vim editor, potentially leading to unauthorized file access or manipulation. The impact is rated moderate by Red Hat, indicating a security risk that should be addressed but is not critical or high severity. There are no reports of exploitation in the wild at this time.

Red Hat has released updated Vim packages that address these path traversal vulnerabilities. Users running affected versions of Red Hat Enterprise Linux 8 should apply the security update as detailed in Red Hat advisory RHSA-2025:17715 and the related article https://access.redhat.com/articles/11258. Applying these official patches is the recommended remediation. No additional mitigation steps are indicated by the vendor.