CVE-2025-8088 | THREATINT

Description

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Reserved 2025-07-23 | Published 2025-08-08 | Updated 2025-08-08 | Assigner ESET

HIGH: 8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-35 Path traversal

Product status

Default status

unknown

Any version

affected

References

www.win-rar.com/...83&cHash=a64b4a8f662d3639dec8d65f47bc93c5

cve.org (CVE-2025-8088)

nvd.nist.gov (CVE-2025-8088)

Download JSON