CVE-2022-30333VulnerabilityPublished 08/09/2022Updated 10/24/2026

CVE-2022-30333: RARLAB UnRAR Directory Traversal Vulnerability

Affects RARLAB UnRARSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 08/09/2022
KEV deadline: 08/30/2022
Ransomware: Used in ransomware campaigns
EPSS: 99.2% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

Description

RARLAB UnRAR on Linux and UNIX platforms contains a directory traversal vulnerability that allows attackers to write files outside the intended extraction directory during unpack operations. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.

Summary

CVE-2022-30333 is a directory traversal vulnerability in RARLAB's UnRAR utility on Linux and UNIX systems. The flaw allows attackers to craft archive files that, when extracted, write files to arbitrary locations on the filesystem, potentially overwriting critical files or planting malicious payloads. This vulnerability has been observed in active exploitation scenarios, including ransomware campaigns targeting vulnerable systems.

Impact

Successful exploitation enables attackers to write files to arbitrary locations during archive extraction, which can lead to unauthorized file modification, potential privilege escalation, or deployment of ransomware payloads. The vulnerability has been exploited in the wild, indicating active threat to affected systems.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid extracting untrusted RAR archives on Linux and UNIX systems or use alternative extraction tools that are not vulnerable.

CVE-2022-30333: RARLAB UnRAR Directory Traversal Vulnerability

What to do

Description

Summary

Impact

Mitigation

Weaknesses

References

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 12:05:37 UTC

Weaknesses

References

Related threats