cvedb.io
CVE-2025-8088
HIGH · CVSS 8.8 ⚠ KEV — EXPLOITED
EPSS exploitation probability: 100%
⚠ Listed in the CISA Known Exploited Vulnerabilities catalog — actively exploited.
Published 2025-08-12 · Last modified 2026-08-11T04:17:18.587

Summary

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Affected products

RARLAB — WinRAR

Does this affect you?

Add your gear to cvedb and we'll alert you only when RARLAB ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.