Zero-Day WinRAR Path Traversal Vulnerability (CVE-2025-8088)

A new Zero-Day Path Traversal Vulnerability (CVE-2025-8088) was identified on Windows version of WinRAR recently.  The vulnerability allows the attackers to execute arbitrary code by crafting malicious archive files and is actively exploited in the wild.  Users are urged to update to the latest version immediately to mitigate any potential threats.

Vulnerability

• Path Traversal Vulnerability (CVE-2025-8088)

Severity Level

• Critical

Affected versions

• WinRAR prior to version 7.13 (for Windows)

Remediation

• Update affected WinRAR with 7.13 or the latest version ASAP.

Reference

• WinRAR News: WinRAR 7.13 Final released
• NVD – CVE-2025-8088
• RARLAB WinRAR < 7.13 Directory Traversal (CVE-2025-8088) | Tenable®

Enquiry

• ITSC Service Desk: http://servicedesk.itsc.cuhk.edu.hk

Published on: 14 Aug 2025