CVE-2025-8088

Name of the Vulnerable Software and Affected Versions WinRAR versions prior to 7.13

Description A path traversal issue in the Windows version of WinRAR allows attackers to execute arbitrary code by crafting malicious archive files. By using a specially formed file path within an archive, the extraction process can be forced to write files outside the intended target directory, including system folders such as the Startup folder. This can lead to the automatic execution of malicious code in the context of the current user. This issue has been exploited in the wild by various threat actors, including Russian APT groups such as Amaranth-Dragon and Gamaredon, to target government networks, defense contractors, and critical infrastructure in Eastern Europe, NATO countries, and Southeast Asia.

Recommendations Update WinRAR to version 7.13 or newer.