CVE-2025-8088: rarlab winrar +1 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2025-8088

CVSS 8.8 · High KEV · sudah dieksploitasi Dipakai ransomware EPSS 94,3%

Kerentanan Path Traversal: '.../...//' pada rarlab winrar, dtsearch. Skor CVSS 3.1 8.8 (High) menurut NVD. Masuk katalog KEV CISA pada 12 Agustus 2025, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Rincian

Terbit di NVD: 8 Agustus 2025
Terakhir diubah: 11 Agustus 2026
Status NVD: Analyzed
CVSS 3.1: 8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-35: Path Traversal: '.../...//'
EPSS (30 hari): 94,3% peluang dieksploitasi; lebih tinggi dari 99,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: RARLAB WinRAR Path Traversal Vulnerability
Masuk KEV: 12 Agustus 2025
Tenggat CISA: 2 September 2025 (untuk instansi federal AS)
Ransomware: Tercatat dipakai dalam kampanye ransomware
Tindakan wajib: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
rarlab	winrar	Semua versi sebelum 7.13
dtsearch	dtsearch	Semua versi sebelum 2023.01

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.vicarius.io/vsociety/posts/cve-2025-8088-mitigate-winrar-zero-day-using-srp-and-ifeo mitigasi · advisory pihak ketiga
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-8088 pemerintah AS
https://support.dtsearch.com/faq/dts0245.htm advisory pihak ketiga
https://www.vicarius.io/vsociety/posts/cve-2025-8088-detect-winrar-zero-day advisory pihak ketiga
https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc... release notes
https://arstechnica.com/security/2025/08/high-severity-winrar-0-day-exploited-for-weeks-by-2-groups/ press/media coverage
https://www.welivesecurity.com/en/eset-research/update-winrar-tools-now-romcom-and-others-exploiting-zero-day-... press/media coverage

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.