CVE-2025-31334 - Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11

Back Back to CVE browser

MEDIUM

Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11

Published Apr 3, 2025

6.8

MEDIUM

CVSS 3.0

EPSS 1.26%

Description

Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.

Affected products

Vendor Rarlab Product WinRAR Default
n/a
- Version
  prior to 7.11
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Rarlab

WinRAR

n/a

Version	Status	Constraints
prior to 7.11	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-356

References (2)

https://jvn.jp/en/jp/JVN59547048/
Third Party Advisory
https://www.win-rar.com/start.html?&L=0
Release Notes

Link	Providers	Tags
https://jvn.jp/en/jp/JVN59547048/		Third Party Advisory
https://www.win-rar.com/start.html?&L=0		Release Notes

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published Apr 3, 2025

Updated Apr 3, 2025

Reserved Mar 27, 2025

Link CVE-2025-31334

CISA Vulnrichment

Updated Apr 3, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-31334

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-31334