coldbraid

CVE-2025-8088 RARLAB WinRAR

RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.

CVSS
not scored

CWE-35

On CISA’s exploited list

RARLAB WinRAR Path Traversal Vulnerability

Added
2025-08-12
Federal patch deadline
2025-09-02
Ransomware use
known