CVE-2025-31334: Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR…

PriorityP337medium6.8CVSS 3.0

AVNACLPRHUIRSUCHIHAH

EPSS

1.22%

64.8th percentile

Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
rarlab	winrar	< 7.11	7.11
rarlab	winrar	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.