PT-2025-32352 · Rarlab +1 · Winrar

Anton Cherepanov

+2

·

Published

2025-07-30

·

Updated

2025-08-26

·

CVE-2025-8088

Report an issue
CVSS v3.1
8.8
VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

**Name of the Vulnerable Software and Affected Versions:**

WinRAR versions prior to 7.13

**Description:**

WinRAR contains a path traversal vulnerability that allows attackers to execute arbitrary code by crafting malicious archive files. This vulnerability has been actively exploited in the wild by multiple threat actors, including the Russia-linked RomCom group and Paper Werewolf. Exploitation involves embedding malicious payloads within RAR archives that, when extracted, place files in unauthorized locations, such as the Windows Startup folder, leading to automatic execution of malicious code. The vulnerability affects Windows versions of WinRAR and applications using the UnRAR library.

**Recommendations:**

Update WinRAR to version 7.13 or later to address this vulnerability.

Fix

RCE

Weakness Enumeration

CWE-35

Related Identifiers

BDU:2025-09597
CVE-2025-8088

Affected Products

Winrar