Is CVE-2025-8088 actively exploited?

CVE-2025-8088 has no public evidence of in-the-wild exploitation as of 2025-10-30.

What is the CVSS score for CVE-2025-8088?

CVE-2025-8088 has a CVSS score of 8.4 (HIGH severity). Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X.

How do I patch CVE-2025-8088?

Patch guidance is available from rarlab security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2025-8088.

Which products are affected by CVE-2025-8088?

2 products: rarlab winrar, dtsearch dtsearch.

Fix CVE-2025-8088 - HIGH rarlab winrar

Description

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

CVSS Metrics

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector: local
Complexity: low
Privileges: none
User Action: active
Confidentiality: undefined
Integrity: undefined
Availability: undefined
Weaknesses: CWE-35

Metadata

Primary Vendor: RARLAB
Published: 8/8/2025
Last Modified: 10/30/2025
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

CVE-2025-8088

Description

CVSS Metrics

Metadata

Affected Products

Remediation Guidance

Executive Summary