Exploited Added to CISA's list December 9, 2025

RARLAB WinRAR: Path Traversal Vulnerability

What to do: Install the latest version of the app from its official site.

Affects: RARLAB WinRAR
Identifier: CVE-2025-6218
What it is: RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.
Official guidance: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Details: National Vulnerability Database entry

"Exploited" means CISA has evidence attackers are using this flaw. Being on the list does not mean your device was attacked; it means the update matters.