VULNERABILITY INTELLIGENCE

CVE-2025-8088

CVSS score8.8 HIGH
EPSS probability94.01%
CISA KEVKnown exploited vulnerability
Published2025-08-08
Last modified2026-08-11
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

RARLAB WinRAR Path Traversal Vulnerability

Vendor / product: RARLAB / WinRAR

Description

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Weakness classification

  • security@eset.com: CWE-35

Primary references