Critical Path Traversal Vulnerability in WinRAR Exposes Users to Remote Code Execution

What changed

A newly identified vulnerability in RARLAB's WinRAR allows remote attackers to execute arbitrary code on affected installations. This flaw is specifically related to how file paths are handled within archive files, enabling unintended directory traversal.

To exploit this vulnerability, user interaction is necessary, as the target must either visit a malicious webpage or open a compromised file.

Who is affected

The vulnerability impacts users of RARLAB's WinRAR, a widely used file compression and archiving tool. Any installation of WinRAR that has not been updated may be at risk.

Users who frequently download and open archive files from untrusted sources are particularly vulnerable.

• RARLAB WinRAR users
• Individuals and organizations using outdated versions of WinRAR
• Users who interact with potentially malicious files or links

What to do

It is crucial for users to update their WinRAR installations to the latest version, which addresses this vulnerability. Regularly checking for software updates can mitigate risks associated with such vulnerabilities.

Additionally, users should exercise caution when opening files from unknown sources, as this vulnerability requires user interaction to be exploited.

• Update WinRAR to the latest version immediately.
• Avoid opening files from untrusted or unknown sources.
• Implement security measures to monitor and block malicious web content.