Users must immediately update to the latest version of WinRAR (7.13 or newer) to patch the vulnerability. What is RAR and Why is it Used?
Eugene Roshal launched RAR in 1995, and it has remained a popular compression format for over three decades. Gztgbzukbzbuzbgu rar
A path-traversal vulnerability allows attackers to create specially crafted archive files that, when opened, can execute malicious code on the victim's computer. Users must immediately update to the latest version
Unlike ZIP, the RAR format is proprietary, although the extraction code is open-source. the RAR format is proprietary
Nation-state groups and financially motivated cybercriminals are actively using this defect, primarily targeting military, government, and technology sectors for espionage.
The flaw affects versions of WinRAR prior to 7.13 , which was released in mid-2025.