POSTING DATE: 2025/12/29

[VULNERABILITY ALERT] 7-Zip Contains a High-Risk Security Vulnerability (CVE-2025-55188), Please Verify and Patch Immediately

  • Subject: [VULNERABILITY ALERT] 7-Zip Contains a High-Risk Security Vulnerability (CVE-2025-55188), Please Verify and Patch Immediately


  • Content Description:
    • Forwarded from National Information Security Information Sharing and Analysis Center Security Alert NISAC-200-202512-00000198
    • Researchers have discovered a Link Following vulnerability (CVE-2025-55188) in 7-Zip.
    • An unauthenticated local attacker can exploit this vulnerability to write arbitrary files. This vulnerability has already been exploited by hackers; please verify and patch as soon as possible.
  • Affected Platforms:
    • 7-Zip versions prior to 25.01 (exclusive)
  • Recommended Actions:
    • Update 7-Zip to version 25.01 (inclusive) or later
  • Reference Material:
    1. https://nvd.nist.gov/vuln/detail/CVE-2025-55188

Computer and Communication Center
Network Systems Division, Respectfully