WinRAR Path Traversal CVE-2025-8088 Actively Exploited, Google Warns Of Persistent ...

Cyberpress • January 28, 2026

Share: View original

A critical WinRAR vulnerability tracked as CVE-2025-8088 is under active exploitation by multiple threat actors to gain and maintain access.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exploitation of WinRAR Path Traversal Flaw Continues Amid CISA Warning The CVE-2025-8088 vulnerability in WinRAR is being exploited by various threat actors for initial access and to deploy malware. The flaw allows attackers to use Alternate Data Streams to write malicious files to arbitrary locations, including the Windows Startup folder. In response to ongoing attacks, the vulnerability has been added to CISA's Known Exploited Vulnerabilities list, with federal agencies ordered to remediate it by December 30, 2025. 12 sources 42

Extracted Entities

CVEs (1)

Tools (1)

Vulnerabilities (1)

WinRAR Path Traversal