ZeroDay Findings
Sign inSign up

Findings

CVE-2025-8088

RARLAB WinRAR Path Traversal Vulnerability

Published Aug 8, 2025 · updated Aug 10, 2026 · rarlab winrar

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 8, 2025 · Catalog

    Detected

    A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

  2. Aug 12, 2025 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  3. Sep 2, 2025 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  4. Aug 10, 2026 · Catalog

    Updated

    A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date Sep 2, 2025

Affected

  • cpe dtsearch/dtsearchversion unspecified
  • cpe rarlab/winrarversion unspecified
  • vendor RARLAB WinRARversion unspecified

Sources

  • CISA KEVCVE-2025-8088

    RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.

    cisa.gov
  • CVE.orgCVE-2025-8088

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2025-8088

    30-day exploitation probability 94.3%

    first.org
  • NIST NVDCVE-2025-8088

    A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček fr

    nvd.nist.gov

References

CVE-2025-8088 · ZeroDay Findings