HIGHCVSS 8.4KNOWN EXPLOITEDRANSOMWARE: KNOWN

CVE-2025-8088

CVE-2025-8088 updated by NVD

Published: 2025-08-12
Modified: 2026-09-21
Sources: cisa-kev, nvd

Summary

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-8088

Includes data from the CISA Known Exploited Vulnerabilities catalog.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.