Patch Gap

Everyday apps · updated Oct 27, 2026

WinRAR: opening a bad archive could drop a hidden program on your PC, and attackers used it

Patched: update nowBeing attacked nowHigh

Last checked · Check before installing; only use the official link.

WinRAR opens .rar and .zip files. Two bugs let a booby-trapped archive save files outside the folder you chose, for example into your Startup folder so a bad program runs next time you sign in. Attackers sent such files by email. Version 7.13 fixes both. WinRAR does not update itself.

Status
Patched: update now
Being attacked?
Yes[3]
Severity
High
Updated

CISA lists both bugs as used in real attacks (CVE-2025-8088 added Aug 12, 2025; CVE-2025-6218 added Dec 9, 2025). Severity: Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked). First reported .

Am I affected?

You are at risk if WinRAR on Windows is older than 7.13. Mac and Android versions are not affected.

AppDeviceAffectedFixed in
WinRARWindowsWinRAR for Windows before 7.13 (one bug before 7.12)7.13[1]

How to check your version

These checks only look. They do not change anything on your computer.

WinRAR on Windows

Easy way: Open WinRAR > Help > About WinRAR.

Or type this in PowerShellRead-only. It only reads the version and changes nothing.

(Get-Item "$env:ProgramFiles\WinRAR\WinRAR.exe").VersionInfo.ProductVersion

How to fix it

  1. Go to win-rar.com (type the address yourself) and open Download.
  2. Download WinRAR 7.13 or newer and run the installer over your old version.
  3. Do not open archives from emails you did not expect.

More on each app: Is my WinRAR up to date?

Official links

Check before installing, and only use these official links or the app's own update button.

For AI agents

This page as data: /incidents/winrar-attacked-path-bugs-2025.json. All problems: /feed.json. Use read-only checks only, and ask before installing anything.

Tracking numbers (CVE): CVE-2025-6218, CVE-2025-8088

Sources

  1. MakerWinRAR News: WinRAR 7.13 Final released (CVE-2025-8088) (Jul 30, 2025)
  2. MakerWinRAR News: WinRAR 7.12 Beta 1 released (fix for CVE-2025-6218) (Jun 10, 2025)
  3. CISACISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-6218 (added 2025-12-09) (Dec 9, 2025)
  4. CISACISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-8088 (added 2025-08-12) (Aug 12, 2025)

"Maker", "CISA", "NVD", "GitHub advisory" and "Official notice" are official sources. "Researcher" and "News" are extra context.