---
title: "RARLAB: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/rarlab/
description: "Every RARLAB vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (2), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2025-12-09
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# RARLAB: known exploited vulnerabilities

- 2025-12-09 [CVE-2025-6218](https://erroneo.us/security/cve/CVE-2025-6218/index.md) RARLAB WinRAR: RARLAB WinRAR Path Traversal Vulnerability (due 2025-12-30; ransomware: Unknown)
- 2025-08-12 [CVE-2025-8088](https://erroneo.us/security/cve/CVE-2025-8088/index.md) RARLAB WinRAR: RARLAB WinRAR Path Traversal Vulnerability (due 2025-09-02; ransomware: Known)

---
Source page: https://erroneo.us/security/vendor/rarlab/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt