CVE-2025-6218 - CVE House
Back to Database
Status published High CVE-2025-6218

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability

Vulnerability Description

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of file paths within archive files. A crafted file path can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27198.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-6218

Credits & Attribution

No credits recorded in the NVD database.

References

More from RARLAB

View All →
CVE-2025-31334
Issue that bypasses the "Mark of the Web" security warning...
Medium 6.8
CVE-2024-30370
RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability
Medium 4.3
CVE-2023-40477
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
High 7.8
CVE-2022-43650
This vulnerability allows remote attackers to disclose sensitive information on...
Low 2.5

Affected Vendor

Affected Software

WinRAR
Vulnerable Versions:
7.11 (64-bit)

Timeline

Official Publish: June 21st, 2025
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-22

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1565.001 Stored Data Manipulation
Impact