CVE-2026-41245
Junrar is an open source java RAR archive library.
Published Apr 20, 2026 · updated Aug 18, 2026 · junrar project junrar
Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archive is extracted. Version 7.5.10 fixes the issue.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Apr 20, 2026 · NIST NVD
Detected
Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archive is extracted. Version 7.5.10 fixes the issue.
Aug 18, 2026 · NIST NVD
Updated
Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archive is extracted. Version 7.5.10 fixes the issue.
Affected
- cpe junrar project/junrarversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-41245
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-41245
Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archive is extracted. Vers
nvd.nist.gov