CVE-2025-31334: Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link tha

Q: How do I fix CVE-2025-31334?

winrar: upgrade to 7.11. Exact commands for each OS are on this page.

Q: Is CVE-2025-31334 being exploited?

CVE-2025-31334 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2025-31334 affect?

CVE-2025-31334 affects winrar. Severity is medium (CVSS 6.8). Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is ope

Q: How urgent is CVE-2025-31334?

Priority 41/100. No elevated risk signals yet.

This month

MEDIUM 6.8UPGRADE

CVE-2025-31334 is a medium-severity flaw (CVSS 6.8) affecting winrar. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	6.8 (Medium)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	High
User interaction	Required
EPSS exploit chance	1.3% (top 30%)
CISA exploited list	No
Weakness	CWE-356
Published	2025-04-03
Last modified	2026-06-17

Publisher (CNA): JPCERT/CC · Vendor: rarlab

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2025-04-03 06:15 UTCPublished CVE record published
2026-06-17 09:10 UTCUpdated Record last modified

rarlab winrar UPGRADE

Affected: < 7.11

Fixed in: 7.11

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy winrar || rpm -q winrar || winrar --version

2. UPGRADE to 7.11 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade winrar

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade winrar

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-31334?

winrar: upgrade to 7.11. Exact commands for each OS are on this page.

Is CVE-2025-31334 being exploited?

CVE-2025-31334 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-31334 affect?

CVE-2025-31334 affects winrar. Severity is medium (CVSS 6.8). Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is ope

How urgent is CVE-2025-31334?

Priority 41/100. No elevated risk signals yet.

Software pages

WinRAR vulnerabilities

Related CVEs

CVE-2025-8088 HIGH 8.8 EXPLOITED UPGRADE UPGRADE RARLAB WinRAR Path Traversal Vulnerability
CVE-2019-25677 MEDIUM 6.2 UPGRADE WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by
CVE-2025-6218 HIGH 7.8 EXPLOITED UPGRADE RARLAB WinRAR Path Traversal Vulnerability
CVE-2025-52331 MEDIUM 6.1 DOWNGRADE Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows at
CVE-2024-36052 HIGH 7.5 UPGRADE RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences,

References

← Back to latest CVEs