CVE-2025-11001: 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

Published Nov 19, 2025
·
Updated

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26753.

Affected Software

3 affected components
7-Zip 7-Zip
All of the following
7-Zip 7-Zip=24.09
Microsoft Windows

Event History

Oct 13, 2025
Advisory Published
via ZDI·12:21 AM
Data Sourced
via ZDI·12:21 AM
DescriptionSeverityAffected Software
Nov 19, 2025
CVE Published
via MITRE·09:16 PM
Data Sourced
via MITRE·09:16 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeaknessAffected Software
Apr 8, 2026
Exploit Published
via ExploitDB·12:00 AM
Known Exploited
04:31 PM

Frequently Asked Questions

1

What is the severity of CVE-2025-11001?

CVE-2025-11001 is classified as a critical vulnerability due to its potential for remote code execution.

2

How do I fix CVE-2025-11001?

To mitigate CVE-2025-11001, update your 7-Zip software to the latest version as soon as it is available.

3

Who is affected by CVE-2025-11001?

CVE-2025-11001 affects installations of 7-Zip, specifically versions prior to the security update.

4

What type of vulnerability is CVE-2025-11001?

CVE-2025-11001 is a remote code execution vulnerability that requires user interaction to exploit.

5

Are there any attack vectors for CVE-2025-11001?

Yes, the attack vectors for CVE-2025-11001 can vary depending on the specific implementation of 7-Zip.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203