CVE WatchAug 11, 2026

CVE-2025-8088

RARLAB WinRAR Path Traversal Vulnerability

CVSS

8.8

High

EPSS

94.3%

p100

KEV

YES

Aug 12, 2025

Exploit Today

0-100

Published: Aug 8, 2025 · Last modified: Aug 11, 2026 · CWE-35

EPSS · 30d

93.8%EPSS · 30 days94.3%

2026-09-162026-10-14

KEV catalog record

Product

RARLAB / WinRAR

Vulnerability

RARLAB WinRAR Path Traversal Vulnerability

Added to KEV

Aug 12, 2025

Remediate by

Sep 2, 2025

Known ransomware use

Yes

Summary description

RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5 ; https://nvd.nist.gov/vuln/detail/CVE-2025-8088

Technical description

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-444159.1 CRI

38.4%

——12Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.17h CVE-2026-444146.8 MED

37.8%

20.3%

——6Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the URL to include a path traversal payload. Successful exploitation of this vulnerability could allow an attacker to access critical system files containing confidential information.8d CVE-2026-1056833.8 LOW

22.6%

——7Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0.7d CVE-2026-1032903.8 LOW

18.5%

——6Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files outside the intended data storage directories on the server.14d CVE-2026-828249.8 CRI

30.3%

——9Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0.14d