CVE Watch—

CVE-2025-8088

RARLAB WinRAR Path Traversal Vulnerability

CVSS

—

Sin CVSS

EPSS

80.9%

p100

KEV

SÍ

12 ago 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

80.9%EPSS · 30 días85.8%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

RARLAB / WinRAR

Vulnerabilidad

RARLAB WinRAR Path Traversal Vulnerability

Añadido a KEV

12 ago 2025

Remediar antes de

2 sept 2025

Uso conocido en ransomware

Descripción resumida

RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5 ; https://nvd.nist.gov/vuln/detail/CVE-2025-8088

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2023-38831—

99.9%

KEV—80RARLAB WinRAR Code Execution Vulnerability—CVE-2018-20250—

99.9%

KEV—80WinRAR Absolute Path Traversal Vulnerability—CVE-2025-6218—

99.7%

KEV—80RARLAB WinRAR Path Traversal Vulnerability—