CVE-2025-27423: Improper Input Validation in Vim
Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the is not sanitized and is taken literally from the tar archive. This allows to execute shell commands via special crafted tar archives. Whether this really happens, depends on the shell being used ('shell' option, which is set using $SHELL). The issue has been fixed as of Vim patch v9.1.1164
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Vim tar.vim pluginto a version that resolves this vulnerability.Fixed in 9.1.1164Patch Vim patch v9.1.1164
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27423?
The severity of CVE-2025-27423 is classified as medium risk due to the potential for code execution when using the tar.vim plugin.
How do I fix CVE-2025-27423?
To fix CVE-2025-27423, upgrade Vim to a version greater than 9.1.1164.
What versions of Vim are affected by CVE-2025-27423?
Vim versions from 9.1.0858 to 9.1.1164 are affected by CVE-2025-27423.
What is the impact of CVE-2025-27423?
The impact of CVE-2025-27423 includes potential unauthorized code execution through manipulated tar files.
Is there a workaround for CVE-2025-27423?
A workaround for CVE-2025-27423 is to disable the tar.vim plugin until Vim is updated.