CVE-2025-55188

🗓️ 08 Aug 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 107 Views

CVE-2025-55188: 7-Zip before 25.01 does not properly handle symbolic links during extraction.

Reporter	Title	Published	Views	Family All 35
Tenable Nessus	7-Zip < 25.01	13 Aug 202500:00	–	nessus
Tenable Nessus	Debian dla-4576 : p7zip - security update	11 May 202600:00	–	nessus
Tenable Nessus	Fedora 43 : retroarch (2025-6e0627440a)	25 Dec 202500:00	–	nessus
Tenable Nessus	Fedora 43 : 7zip (2025-b6422d64f9)	3 Dec 202500:00	–	nessus
Tenable Nessus	Fedora 42 : retroarch (2025-dda924d757)	25 Dec 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-55188	30 Aug 202500:00	–	nessus
AstraLinux	Astra Linux - уязвимость в p7zip	20 May 202605:53	–	astralinux
Information Security Automation	August Linux Patch Wednesday	4 Sep 202508:28	–	avleonov
GithubExploit	Exploit for Link Following in 7-Zip	11 Aug 202508:47	–	githubexploit
Circl	CVE-2025-55188	8 Aug 202523:51	–	circl

NVD

Vulners

CNA

Node

7-zip 7-zipRange<25.01

[
  {
    "defaultStatus": "unaffected",
    "product": "7-Zip",
    "vendor": "7-Zip",
    "versions": [
      {
        "lessThan": "25.01",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/ip7z/7zip/releases/tag/25.01
github	www.github.com/ip7z/7zip/compare/25.00...25.01
github	www.github.com/lunbun/CVE-2025-55188/
vicarius	www.vicarius.io/vsociety/posts/cve-2025-55188-detect-7-zip-vulnerable-version
lunbun	www.lunbun.dev/blog/cve-2025-55188/
sourceforge	www.sourceforge.net/p/sevenzip/discussion/45797/thread/da14cd780b/
vicarius	www.vicarius.io/vsociety/posts/cve-2025-55188-mitigate-7-zip-vulnerability
youtu	www.youtu.be/sWT6M1cfnwM
openwall	www.openwall.com/lists/oss-security/2025/08/09/1
openwall	www.openwall.com/lists/oss-security/2025/08/10/1

04 Nov 2025 22:16Current

7.2High risk

Vulners AI Score7.2

CVSS 3.13.6

EPSS0.00157

SSVC

CWE-59