CVE-2025-53906

一、漏洞信息
 漏洞编号：[CVE-2025-53906](https://nvd.nist.gov/vuln/detail/CVE-2025-53906)
 漏洞归属组件：[vim](https://gitee.com/src-openeuler/vim)
 漏洞归属的版本：9.0,9.0.2092,9.1.1019
 CVSS V3.0分值：
  BaseScore：4.1 Medium
  Vector：CVSS：3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L
 漏洞简述：
  A vulnerability, which was classified as critical, has been found in vim up to 9.1.1550 (Word Processing Software).Using CWE to declare the problem leads to CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.Impacted is confidentiality, integrity, and availability.Upgrading to version 9.1.1551 eliminates this vulnerability. Applying the patch 586294a04179d855c3d1d4ee5ea83931963680b8 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.
 漏洞公开时间：2025-07-16 05:15:34
 漏洞创建时间：2025-07-16 09:53:17
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-53906
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://github.com/vim/vim/security/advisories/GHSA-r2fw-9cw4-mj86 |  |
|  | https://www.cve.org/CVERecord?id=CVE-2025-53906 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2380360 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://access.redhat.com/security/cve/cve-2025-53906 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-53906 |  |
|  | https://www.mend.io/vulnerability-database/CVE-2025-53906 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-53906 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-53906 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-53906 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-53906 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-53906 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-53906 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-53906 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://security-tracker.debian.org/tracker/CVE-2025-53906 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://security-tracker.debian.org/tracker/CVE-2025-53906 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://security-tracker.debian.org/tracker/CVE-2025-53906 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://security-tracker.debian.org/tracker/CVE-2025-53906 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2380360 |  |
|  | https://www.cve.org/CVERecord?id=CVE-2025-53906 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-53906 |  |
|  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  |
|  | https://github.com/vim/vim/security/advisories/GHSA-r2fw-9cw4-mj86 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2380360 |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  七彩瞬析开源风险感知平台
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  | nvd |
|  |  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  | cvelistv5 |
|  |  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  | whitesource |
|  |  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  | snyk |
|  |  | https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8 |  | redhat |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  Vim 是一款开源命令行文本编辑器。在 9.1.1551 版本之前，Vim 的 zip.vim 插件中存在一个路径遍历漏洞，允许在打开特制的 zip 压缩包时覆盖任意文件。由于此漏洞需要用户直接交互，因此影响较小。然而，成功利用此漏洞可能会导致敏感文件被覆盖或可执行代码被放置在特权位置，具体取决于编辑压缩包进程的权限。受害者必须使用 Vim 编辑此类文件，这将泄露文件名和文件内容，细心的用户可能会怀疑其中存在一些奇怪的事情。成功利用此漏洞可能导致在底层操作系统上执行任意命令。
 openEuler评分：
  4.1
 Vector：CVSS：3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L
 受影响版本排查(受影响/不受影响)：
  1.master(9.1.1546):受影响
2.openEuler-20.03-LTS-SP4(9.0):受影响
3.openEuler-22.03-LTS-SP3(9.0):受影响
4.openEuler-22.03-LTS-SP4(9.0):受影响
5.openEuler-24.03-LTS(9.0.2092):受影响
6.openEuler-24.03-LTS-Next(9.0.2092):受影响
7.openEuler-24.03-LTS-SP1(9.0.2092):受影响
8.openEuler-24.03-LTS-SP2(9.0.2092):受影响

修复是否涉及abi变化(是/否)：
  1.master(9.1.1546):否
2.openEuler-20.03-LTS-SP4(9.0):否
3.openEuler-22.03-LTS-SP3(9.0):否
4.openEuler-22.03-LTS-SP4(9.0):否
5.openEuler-24.03-LTS(9.0.2092):否
6.openEuler-24.03-LTS-Next(9.0.2092):否
7.openEuler-24.03-LTS-SP1(9.0.2092):否
8.openEuler-24.03-LTS-SP2(9.0.2092):否

原因说明：
  1.master(9.1.1546):正常修复
2.openEuler-20.03-LTS-SP4(9.0):正常修复
3.openEuler-22.03-LTS-SP3(9.0):正常修复
4.openEuler-22.03-LTS-SP4(9.0):正常修复
5.openEuler-24.03-LTS(9.0.2092):正常修复
6.openEuler-24.03-LTS-Next(9.0.2092):正常修复
7.openEuler-24.03-LTS-SP1(9.0.2092):正常修复
8.openEuler-24.03-LTS-SP2(9.0.2092):正常修复

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2025-1985

src-openEuler/vim

内容风险标识

评论 (11)

src-openEuler/vim .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2025-53906

评论 (11)

搜索帮助

src-openEuler/vim