Back to the CVE list
CVE-2025-6218 CISA KEV · Actively exploited

RARLAB WinRAR Path Traversal Vulnerability

CVSS score

—

EPSS probability

%90.5

Risk score

—

Published

10 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Comprehensive analysis and proof-of-concept for CVE-2025-6218 - WinRAR path traversal RCE vulnerability affecting versions 7.11 and earlier

Public PoCSource updated: 11.05.2026 07:47:26

CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted

Public PoCSource updated: 14.08.2026 13:01:53

RARLAB WinRAR Directory Traversal Remote Code Execution

Public PoCSource updated: 11.07.2026 21:34:47

Proof of Concept for CVE-2025-6218, demonstrating the exploitation of a vulnerability in WinRAR versions 7.11 and under, involving improper handling of archive extraction paths.

Public PoCSource updated: 11.07.2026 21:34:45

A simple proof of concept for WinRAR Path Traversal | RCE | CVE-2025-6218

Public PoCSource updated: 11.07.2026 21:34:55

speinador/CVE-2025-6218_WinRAR

Public PoCSource updated: 11.07.2026 21:34:56

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-6218"