RCE stands for Remote Code Execution: being able to trigger arbitrary code execution (ACE) from a remote machine.

This, however, is mislabelled: it’s not remote code execution at all, only local. It would only become RCE if there was some path to remotely triggering Vim to open the attack file, or Emacs the attack repository, or if a normal way of fetching a repository automatically set up and executed the hook.