high7.8Known exploited
CVE-2025-6218
RARLAB WinRAR Path Traversal Vulnerability
Exploited in the wild
This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2025-12-09. Federal due date: 2025-12-30.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rarlab | Winrar | before 7.12 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://www.win-rar.com/singlenewsview.html?&tx_ttnews%5Btt_news%5D=276&cHash=388885bd3908a40726f535c026f94eb6
- https://www.zerodayinitiative.com/advisories/ZDI-25-409/
- https://foresiet.com/blog/apt-c-08-winrar-directory-traversal-exploit/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6218
- https://www.secpod.com/blog/archive-terror-dissecting-the-winrar-cve-2025-6218-exploit-apt-c-08s-stealth-move/