CVE-2025-27423

A flaw was found in the tar.vim plugin of Vim. This vulnerability allows arbitrary command execution via specially crafted tar archives that exploit the unsanitized :read ex command.

Red Hat believes this vulnerability to be of moderate impact due to the fact that successful execution requires both the shell-specific conditions as well as manual interaction on the part of the victim to open and interact with a specially-crafted tar file in vim.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.