High severity · published Jun 21, 2025
CVE-2025-6218
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
In wildKEV
7.8
CVSS
90.5%
EPSS
Yes
On KEV
Description
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the handling of file paths within archive files. A crafted file path can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27198.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)90.5% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Dec 9, 2025
Federal remediation dueDec 30, 2025
Ransomware campaign useNot known
Affected products
Which versions
WI
WinRAR · RARLAB
7.11 (64-bit) · source: vendor, NVD, KEV
In the news
VulnerabilityHigh
[CISA KEV] CVE-2025-6218: RARLAB WinRAR - RARLAB WinRAR Path Traversal Vulnerability
RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.
WIWinRARCVE-2025-6218
Dec 9, 2025·CISA KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-6218
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-6218
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_research-advisory
https://www.zerodayinitiative.com/advisories/ZDI-25-409/
vendor-advisory
https://www.win-rar.com/singlenewsview.html?&tx_ttnews%5Btt_news%5D=276&cHash=388885bd3908a40726f535c026f94eb6
More from WinRAR
8.8
CVE-2025-8088
Path traversal vulnerability in WinRAR
7.8
CVE-2023-38831
RARLAB WinRAR Code Execution Vulnerability
7.8
CVE-2018-20250
WinRAR Absolute Path Traversal Vulnerability
7.8
CVE-2026-14191
WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader
7.8
CVE-2023-40477
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability