CVE-2025-8088highunder attackransomwareCWE-35

CVE-2025-8088: high-severity vulnerability in win.rar GmbH WinRAR

Path traversal vulnerability in WinRAR

Published · Updated

Follow this CVE+ Monitor WinRAR+ Monitor WinRAR

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

95Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 8.4epss 94%
from disclosure to weaponsame day
Published on NVDAug 8
1st PoCMay 26
CISA KEV+4d
Action required by CISAfederal deadline: 2025-09-02

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

WinRAR on Windows has a flaw that lets attackers run malicious code by creating specially crafted archive files. When you open these files, the attacker's code can execute on your computer.

Technical detail

A path traversal vulnerability in WinRAR's Windows implementation allows remote code execution through maliciously crafted archive files. The vulnerability exploits insufficient path validation during file extraction, enabling attackers to write and execute arbitrary code; this has been actively exploited in the wild.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
win.rar GmbH · WinRAR
public PoCs found — 58
githubgithub.com/sxyrxyy/CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-★ 71githubgithub.com/onlytoxi/CVE-2025-8088-Winrar-Tool★ 56githubgithub.com/knight0x07/WinRAR-CVE-2025-8088-PoC-RAR★ 46githubgithub.com/hexsecteam/CVE-2025-8088-Winrar-Tool★ 40githubgithub.com/pentestfunctions/CVE-2025-8088-Multi-Document★ 36githubgithub.com/aldisakti2/CVE-2025-8088-BUILDER-Winrar-Tool★ 28githubgithub.com/AdityaBhatt3010/CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal★ 12githubgithub.com/pentestfunctions/best-CVE-2025-8088★ 10githubgithub.com/jordan922/CVE-2025-8088★ 10githubgithub.com/kitsuneshade/WinRAR-Exploit-Tool---Rust-Edition★ 8githubgithub.com/starfallreverie/winrar-exploit★ 8githubgithub.com/walidpyh/CVE-2025-8088★ 5githubgithub.com/lennertdefauw/CVE-2025-8088★ 5githubgithub.com/Syrins/CVE-2025-8088-Winrar-Tool-Gui★ 3githubgithub.com/undefined-name12/CVE-2025-8088-Winrar★ 2githubgithub.com/pexlexity/WinRAR-CVE-2025-8088-Path-Traversal-PoC★ 2githubgithub.com/travisbgreen/cve-2025-8088★ 2githubgithub.com/DeepBlue-dot/CVE-2025-8088-WinRAR-Startup-PoC★ 1githubgithub.com/Shinkirou789/Cve-2025-8088-WinRar-vulnerability★ 1githubgithub.com/0xAbolfazl/CVE-2025-8088-WinRAR-PathTraversal-PoC★ 1githubgithub.com/ilhamrzr/RAR-Anomaly-Inspector★ 1githubgithub.com/pescada-dev/-CVE-2025-8088★ 1githubgithub.com/ghostn4444/CVE-2025-8088★ 0githubgithub.com/IsmaelCosma/CVE-2025-8088★ 0githubgithub.com/techcorp/CVE-2025-8088-Exploit★ 0githubgithub.com/nhattanhh/CVE-2025-8088★ 0githubgithub.com/hbesljx/CVE-2025-8088-EXP★ 0githubgithub.com/shaheeryasirofficial/CVE-2025-8088★ 0githubgithub.com/xi0onamdev/WinRAR-CVE-2025-8088-Exploitation-Toolkit★ 0vulncheckvulncheck.com/xdb/00de97ba90c7unverifiedvulncheckvulncheck.com/xdb/497fbf11e8deunverifiedvulncheckvulncheck.com/xdb/6d512e0820d7unverifiedvulncheckvulncheck.com/xdb/f64138d13478unverifiedvulncheckvulncheck.com/xdb/78ed85fda27eunverifiedvulncheckvulncheck.com/xdb/5da337bc5f89unverifiedvulncheckvulncheck.com/xdb/9b534d3ef6c7unverifiedvulncheckvulncheck.com/xdb/eb888ee6693funverifiedvulncheckvulncheck.com/xdb/3d258c7fae5aunverifiedvulncheckvulncheck.com/xdb/c9ec17df3484unverifiedvulncheckvulncheck.com/xdb/78b7ca6ea1dfunverifiedvulncheckvulncheck.com/xdb/9d7c3c7fdd33unverifiedvulncheckvulncheck.com/xdb/6f9c869c6fb9unverifiedvulncheckvulncheck.com/xdb/55d1b6a61807unverifiedvulncheckvulncheck.com/xdb/45645f7612e0unverifiedvulncheckvulncheck.com/xdb/a844d0def670unverifiedvulncheckvulncheck.com/xdb/1e4c37c73a41unverifiedvulncheckvulncheck.com/xdb/154992e62e50unverifiedvulncheckvulncheck.com/xdb/7650cf5a95abunverifiedvulncheckvulncheck.com/xdb/34ba9124d782unverifiedvulncheckvulncheck.com/xdb/cd3c4f37b48aunverifiedvulncheckvulncheck.com/xdb/961835f2d3b8unverifiedvulncheckvulncheck.com/xdb/1d051fb3ef28unverifiedvulncheckvulncheck.com/xdb/30419eb3bb9funverifiedvulncheckvulncheck.com/xdb/292be7ae71caunverifiedvulncheckvulncheck.com/xdb/0b2ca6f9f58aunverifiedvulncheckvulncheck.com/xdb/f46f62569182unverifiedvulncheckvulncheck.com/xdb/f7413bcb302funverifiedvulncheckvulncheck.com/xdb/ef3da8669a27unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.