CVE Watch—

CVE-2025-8088

RARLAB WinRAR Path Traversal Vulnerability

CVSS

—

No CVSS

EPSS

80.9%

p100

KEV

YES

Aug 12, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

80.9%EPSS · 30 days85.8%

2026-06-302026-07-16

KEV catalog record

Product

RARLAB / WinRAR

Vulnerability

RARLAB WinRAR Path Traversal Vulnerability

Added to KEV

Aug 12, 2025

Remediate by

Sep 2, 2025

Known ransomware use

Summary description

RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5 ; https://nvd.nist.gov/vuln/detail/CVE-2025-8088

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-38831—

99.9%

KEV—80RARLAB WinRAR Code Execution Vulnerability—CVE-2018-20250—

99.9%

KEV—80WinRAR Absolute Path Traversal Vulnerability—CVE-2025-6218—

99.7%

KEV—80RARLAB WinRAR Path Traversal Vulnerability—