CVE-2025-8088Used in ransomware
RA
RARLAB WinRAR
RARLAB WinRAR Path Traversal Vulnerability
What it is
RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639
- nvd.nist.gov/vuln/detail/CVE-2025-8088
Description and required action as published by CISA. Full record at NVD.
Other RARLAB entries on the list
- WinRAR RARLAB WinRAR Path Traversal Vulnerability CVE-2025-6218 · Dec 9, 2025
- WinRAR RARLAB WinRAR Code Execution Vulnerability CVE-2023-38831 · Aug 24, 2023
- UnRAR RARLAB UnRAR Directory Traversal Vulnerability CVE-2022-30333 · Aug 9, 2022
- WinRAR WinRAR Absolute Path Traversal Vulnerability CVE-2018-20250 · Feb 15, 2022