coldbraid

CVE-2025-6218 RARLAB WinRAR

RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.

CVSS
not scored

CWE-22

On CISA’s exploited list

RARLAB WinRAR Path Traversal Vulnerability

Added
2025-12-09
Federal patch deadline
2025-12-30
Ransomware use
not known