Google Warns of WinRAR Vulnerability Exploited to Gain Control Over Windows System

Cybersecuritynews •Tushar Subhra Dutta • January 28, 2026

A critical security flaw in WinRAR, one of the most widely used file compression tools for Windows, has become a favorite weapon for attackers seeking unauthorized access to computer systems. The vulnerability, tracked as CVE-2025-8088, allows threat actors to place malicious files into sensitive system directories without user awareness, essentially handing over control of Windows […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exploitation of WinRAR Path Traversal Flaw Continues Amid CISA Warning The CVE-2025-8088 vulnerability in WinRAR is being exploited by various threat actors for initial access and to deploy malware. The flaw allows attackers to use Alternate Data Streams to write malicious files to arbitrary locations, including the Windows Startup folder. In response to ongoing attacks, the vulnerability has been added to CISA's Known Exploited Vulnerabilities list, with federal agencies ordered to remediate it by December 30, 2025. 12 sources 42

Extracted Entities

Google Warns of WinRAR Vulnerability Exploited to Gain Control Over Windows System

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)