Vulnerabilities CVE-2025-8088

CVE-2025-8088

High

Open

KEV

TLP:CLEAR

Path traversal vulnerability in WinRAR

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Details

CVSS Score: 8.4
EPSS Score ⓘ: 94.55%

99.8th percentile
CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 100%
Published: Aug 8, 2025
Last Modified: Aug 11, 2026
CISA KEV
Date Added: Aug 12, 2025
Patch Due: Sep 2, 2025
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.