7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
73Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck y tiene prueba de concepto pública.
ssvc Actcvss 7epss 27%
de la publicación al arma0 días
Publicada en NVD19 nov
1ª PoC14 oct
VulnCheck+62d
probabilidad de explotación
27%top 2% de las CVE
explotación observada
síVulnCheck
13 exploit(s) público(s)
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26753.
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
7-Zip · 7-ZipPoCs públicas encontradas — 13
exploitdbwww.exploit-db.com/exploits/52501no verificadogithubgithub.com/pacbypass/CVE-2025-11001★ 151githubgithub.com/mbanyamer/CVE-2025-11001---7-Zip★ 7githubgithub.com/I3r1h0n/7Ziprowler★ 1githubgithub.com/lastvocher/7zip-CVE-2025-11001★ 0githubgithub.com/ranasen-rat/CVE-2025-11001★ 0vulncheckvulncheck.com/xdb/761fb1ba9b69no verificadovulncheckvulncheck.com/xdb/4ba4387a5c21no verificadovulncheckvulncheck.com/xdb/69cd6dc0c9cbno verificadovulncheckvulncheck.com/xdb/c3ff30916c09no verificadovulncheckvulncheck.com/xdb/b39307602fe6no verificadovulncheckvulncheck.com/xdb/5495a1d67b1dno verificadovulncheckvulncheck.com/xdb/8747cceb7d12no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.