CVE-2022-30333
RARLAB UnRAR Directory Traversal Vulnerability
CVSS
—
No CVSS
EPSS
99.0%
p100
KEV
YES
Aug 9, 2022
Exploit Today
80
0-100
Published: — · Last modified: —
99.0%EPSS · 30 days99.0%
2026-06-302026-07-16
Product
RARLAB / UnRAR
Vulnerability
RARLAB UnRAR Directory Traversal Vulnerability
Added to KEV
Aug 9, 2022
Remediate by
Aug 30, 2022
Known ransomware use
Yes
Summary description
RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.
Required action
Apply updates per vendor instructions.
Notes
Vulnerability updated with version 6.12. Accessing link will download update information: https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz; https://nvd.nist.gov/vuln/detail/CVE-2022-30333
No related CVEs by CWE or product.