CVE-2025-11002

Name of the Vulnerable Software and Affected Versions 7-Zip (affected versions not specified)

Description The issue concerns an incorrect handling of symbolic links before file access within the 7-Zip file archiver. Successful exploitation may allow an attacker to execute arbitrary code when a specially crafted ZIP archive is opened by a user. The issue involves a directory traversal, potentially leading to remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.