Detections
Analytics
CVE-2025-8088
high
Description
A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.
References
https://www.vicarius.io/vsociety/posts/cve-2025-8088-mitigate-winrar-zero-day-using-srp-and-ifeo
https://www.vicarius.io/vsociety/posts/cve-2025-8088-detect-winrar-zero-day
https://securelist.com/vulnerabilities-and-exploits-in-q2-2026/121091/
https://thehackernews.com/2026/06/gamaredon-expands-ukraine-attacks-with.html
https://www.securityweek.com/russian-apt-deploys-stockstay-backdoor-against-ukrainian-targets/
https://thehackernews.com/2026/06/google-details-turlas-new-stockstay.html
https://www.darkreading.com/vulnerabilities-threats/russian-groups-winrar-flaw-ukrainian-orgs
https://thehackernews.com/2026/06/winrar-flaw-exploited-by-russia-aligned.html
https://thehackernews.com/2026/06/gamaredon-exploits-winrar-to-deliver.html
https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/
https://thehackernews.com/2026/05/ghostwriter-targets-ukrainian.html
https://cloud.google.com/blog/topics/threat-intelligence/ransomware-ttps-shifting-threat-landscape/
https://therecord.media/google-says-90-zero-days-exploited-apt-spyware-vendors
https://cloud.google.com/blog/topics/threat-intelligence/2025-zero-day-review/
https://www.infosecurity-magazine.com/news/hacking-exploits-windows-winrar/
https://thehackernews.com/2026/02/china-linked-amaranth-dragon-exploits.html
https://www.theregister.com/2026/01/28/winrar_bug_under_attack/
https://www.securityweek.com/apts-cybercriminals-widely-exploiting-winrar-vulnerability/
https://www.helpnetsecurity.com/2026/01/28/winrar-vulnerability-exploited-cve-2025-8088/
https://www.darkreading.com/application-security/months-after-patch-winrar-bug-poised-smbs-hardest
https://thehackernews.com/2026/01/google-warns-of-active-exploitation-of.html
https://hackread.com/hackers-patch-winrar-flaw-malware-google/
https://cyberscoop.com/winrar-defect-active-exploits-google-threat-intel/
https://cloud.google.com/blog/topics/threat-intelligence/exploiting-critical-winrar-vulnerability/
https://thehackernews.com/2025/12/warning-winrar-vulnerability-cve-2025.html
https://securelist.com/vulnerabilities-and-exploits-in-q3-2025/118197/
https://thehackernews.com/2025/11/from-log4j-to-iis-chinas-hackers-turn.html
https://thehackernews.com/2025/10/russian-hackers-target-ukrainian.html
https://bartblaze.blogspot.com/2025/10/earth-estries-alive-and-kicking.html
https://thehackernews.com/2025/10/apt36-targets-indian-government-with.html
https://latesthackingnews.com/2025/08/13/winrar-fixed-a-zero-day-flaw-exploited-by-romcom/
https://www.helpnetsecurity.com/2025/08/12/winrar-zero-day-cve-2025-8088-attacks/
https://www.databreachtoday.com/russian-hackers-exploit-winrar-zero-day-a-29200
https://www.theregister.com/2025/08/11/russias_romcom_among_those_exploiting/
https://www.securityweek.com/russian-hackers-exploited-winrar-zero-day-in-attacks-on-europe-canada/
https://www.infosecurity-magazine.com/news/winrar-zero-day-exploited-romcom/
https://www.helpnetsecurity.com/2025/08/11/winrar-zero-day-cve-2025-8088/
https://therecord.media/winrar-zero-day-exploited-romcom-paper-werewolf-goffee-hackers
https://arstechnica.com/security/2025/08/high-severity-winrar-0-day-exploited-for-weeks-by-2-groups/
https://thehackernews.com/2025/08/winrar-zero-day-under-active.html
https://github.com/Lewis-Ricardo/Amaranth-Project
https://github.com/shaheeryasirofficial/CVE-2025-8088
https://github.com/undefined-name12/CVE-2025-8088-Winrar
https://github.com/Ismael-20223/CVE-2025-8088
https://github.com/ilhamrzr/RAR-Anomaly-Inspector
https://github.com/vitalichkaa/CVE-2025-8088
https://github.com/Chrxstxqn/CVE-2025-6218-WinRAR-RCE-POC
https://github.com/xi0onamdev/WinRAR-CVE-2025-8088-Exploitation-Toolkit
https://github.com/4daysday/cve-2025-8088
https://github.com/h4vier/cve-2025-8088
https://github.com/32BitZ-Studio/Total-POC-CVE
https://github.com/h0melike/cve-2025-8088
https://github.com/WezRyan/CVE-2025-8088
https://github.com/kredscript/cve-2025-8088
https://github.com/shourout/CVE-2025-8088
https://github.com/nuky-alt/CVE-2025-8088
https://github.com/B1ack4sh/Blackash-CVE-2025-8088
https://github.com/mocred/cve-2025-8088
https://github.com/kaucent/CVE-2025-8088
https://github.com/blowrrr/cve-2025-8088
https://github.com/tookATE/CVE-2025-8088
https://github.com/haspread/CVE-2025-8088
https://github.com/kyomber/CVE-2025-8088
https://github.com/lucyna77/winrar-exploit
https://github.com/hbesljx/CVE-2025-8088-EXP
https://github.com/Shinkirou789/Cve-2025-8088-WinRar-vulnerability
https://github.com/tartalu/CVE-2025-8088
https://github.com/kitsuneshade/WinRAR-Exploit-Tool---Rust-Edition
https://github.com/AdityaBhatt3010/CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal
https://github.com/pescada-dev/-CVE-2025-8088
https://github.com/Syrins/CVE-2025-8088-Winrar-Tool-Gui
https://github.com/pentestfunctions/CVE-2025-8088-Multi-Document
https://github.com/travisbgreen/cve-2025-8088
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-8088
Details
Published: 2025-08-08
Updated: 2026-08-11
Known Exploited Vulnerability (KEV)
Risk Information
CVSS v2
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Severity: Critical
CVSS v3
Base Score: 8.8
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: High
CVSS v4
Base Score: 8.4
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Severity: High
EPSS
EPSS: 0.94551
Vulnerability Watch
Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.
Vulnerability of Interest