CVE-2025-27423: high-severity vulnerability in vim
Improper Input Validation in Vim
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Vim's tar.vim plugin executes unintended shell commands when opening specially crafted tar files because it doesn't validate filenames before using them in commands. An attacker can trick users into opening malicious tar archives to run arbitrary code on their system.
CWE-77 improper input validation vulnerability in tar.vim plugin (Vim 9.1.0858+) where unsanitized filenames from tar archives are passed directly to the ':read' ex command, allowing shell command injection depending on the configured shell. The attack requires user interaction to open a malicious tar file, but successful exploitation results in arbitrary code execution with user privileges.
In the same product, most dangerous first.