CVE-2022-30333
RARLAB UnRAR Directory Traversal Vulnerability
Published May 9, 2022 · updated Oct 2, 2026 · rarlab unrar
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
Timeline
Detection, updates, and resolution for this record.
May 9, 2022 · Catalog
Detected
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
Aug 9, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Aug 30, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Oct 2, 2026 · Catalog
Updated
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
Required action
Apply updates per vendor instructions.
CISA due date Aug 30, 2022
Affected
- cpe debian/debian linux10.0
- cpe rarlab/unrarversion unspecified
- vendor RARLAB UnRARversion unspecified
Sources
- CISA KEVCVE-2022-30333
RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.
cisa.gov - CVE.orgCVE-2022-30333
Official CVE identifier
cve.org - FIRST EPSSCVE-2022-30333
30-day exploitation probability 99.2%
first.org - Metasploit Modulesexploit_linux/fileformat/unrar_cve_2022_30333
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - Metasploit Modulesexploit_linux/http/zimbra_unrar_cve_2022_30333
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2022-30333
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
nvd.nist.gov - Packet Storm Securityhttp://packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.html
Packet Storm link already published on the finding.
packetstormsecurity.com