CVE-2025-8088

RARLAB WinRAR Path Traversal Vulnerability

RARLAB — WinRAR

Added to KEV catalog: 12 August 2025
Federal remediation due date: 2 September 2025
Weakness classification (CWE): CWE-35

CISA Description

RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5 ; https://nvd.nist.gov/vuln/detail/CVE-2025-8088

View on NVD View on MITRE CVE View full CISA catalog

More RARLAB Vulnerabilities

CVE-2025-6218

RARLAB WinRAR Path Traversal Vulnerability

CVE-2023-38831

RARLAB WinRAR Code Execution Vulnerability

CVE-2022-30333

RARLAB UnRAR Directory Traversal Vulnerability

CVE-2018-20250

WinRAR Absolute Path Traversal Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services