CVE-2025-8088

🗓️ 08 Aug 2025 11:11:41Reported by ESETType

cve🔗 web.nvd.nist.gov📰️ 146 Media mentions👁 299 Views

Path traversal vulnerability in WinRAR allows remote code execution via malicious archives.

Reporter	Title	Published	Views	Family All 75
GithubExploit	Exploit for Path Traversal in Rarlab Winrar	21 Aug 202507:49	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rarlab Winrar	13 Sep 202515:39	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rarlab Winrar	8 Nov 202508:05	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rarlab Winrar	14 Feb 202602:10	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rarlab Winrar	27 Nov 202516:24	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rarlab Winrar	27 Aug 202506:32	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rarlab Winrar	2 Jan 202618:19	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rarlab Winrar	21 Oct 202504:55	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rarlab Winrar	23 Nov 202508:52	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rarlab Winrar	26 Aug 202520:37	–	githubexploit

NVD

Node

rarlab winrarRange<7.13

AND

microsoft windowsMatch-

Node

dtsearch dtsearchRange<2023.01

AND

microsoft windowsMatch-

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Windows"
    ],
    "product": "WinRAR",
    "vendor": "win.rar GmbH",
    "versions": [
      {
        "lessThanOrEqual": "7.12",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
win-rar	www.win-rar.com/singlenewsview.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
vicarius	www.vicarius.io/vsociety/posts/cve-2025-8088-detect-winrar-zero-day
vicarius	www.vicarius.io/vsociety/posts/cve-2025-8088-mitigate-winrar-zero-day-using-srp-and-ifeo
welivesecurity	www.welivesecurity.com/en/eset-research/update-winrar-tools-now-romcom-and-others-exploiting-zero-day-vulnerability/
arstechnica	www.arstechnica.com/security/2025/08/high-severity-winrar-0-day-exploited-for-weeks-by-2-groups/
support	www.support.dtsearch.com/faq/dts0245.htm

30 Oct 2025 15:50Current

7.9High risk

Vulners AI Score7.9

CVSS 3.18.8

CVSS 48.4

EPSS0.11605

SSVC