CVE-2025-8088

WinRAR can open compressed files (archives). With this flaw, a malicious archive can trick the program into writing files to unintended locations, and that can lead to running harmful code when the archive is opened. Think of it like a “zip” package that, instead of just containing documents for delivery, also contains a hidden instruction to place items anywhere on your property—even outside the intended room.

This matters to you if you use or allow files to be opened on Windows with rarlab winrar, WinRAR GmbH WinRAR, or win.rar GmbH WinRAR. It’s also listed as affecting dtsearch dtsearch, so businesses using that product on Windows should include it in their check. Because exploitation is already known to be happening in real attacks, the risk is not just theoretical.

This is RED urgency: attackers are already exploiting it “in the wild,” and the likelihood of attempts in the coming month is very high. Since a malicious file can be delivered and then trigger code execution when opened, delays can turn a normal day of file handling into an incident. Act now to remove exposure by updating or hardening the affected software.