ExploitPublished
7-Zip 24.00 - Directory Traversal
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 22 Apr 2026, 07:07 UTC
What to do
AI-suggested
Until an official fix is available, users should exercise caution when extracting archives from untrusted sources and consider running extraction processes with least privilege to limit potential impact.
Description
7-Zip 24.00 - Directory Traversal
Indicators of compromise
Exploit source code
# Exploit Title: 7-Zip < 25.00 - Directory Traversal to RCE via Malicious ZIP
# Date: 2025-11-22
# Author: Mohammed Idrees Banyamer
# Author Country: Jordan
# Instagram: @banyamer_security
# GitHub: https://github.com/mbanyamer
# Vendor Homepage: https://www.7-zip.org
# Software Link: https://www.7-zip.org/download.html
# Version: 7-Zip < 25.00
# Tested on: Windows 10 / Windows 11 (7-Zip 24.xx)
# CVE: CVE-2025-11001
# CVSS: 8.8 (High) - draft estimation
# Category: Local Privilege Escalation / …References
Community reviews
Loading reviews…