Red Hat Product Security has published an advisory addressing two path traversal vulnerabilities in Vim (CVE-2025-53905 and CVE-2025-53906). These vulnerabilities are categorized under CWE-22 and affect multiple architectures and versions of Red Hat Enterprise Linux 10. The advisory rates the security impact as moderate and provides updated Vim packages to remediate the issue. The vulnerabilities allow attackers to traverse file paths improperly, potentially accessing unauthorized files. The advisory references Red Hat article 11258 for update instructions and includes SHA-256 hashes for the updated packages.

The vulnerabilities could allow an attacker to perform path traversal attacks via Vim, potentially leading to unauthorized access to files outside the intended directory. The security impact is rated as moderate by Red Hat Product Security. There are no reports of active exploitation in the wild.

Red Hat has released updated Vim packages that fix these path traversal vulnerabilities. Users of affected Red Hat Enterprise Linux 10 versions should apply the security update as described in Red Hat advisory RHSA-2025:17913 and the referenced article https://access.redhat.com/articles/11258. Applying these official patches fully mitigates the vulnerabilities. No additional mitigation steps are indicated by the vendor.