WinRAR Absolute Path Traversal Vulnerability

A local attacker, without authentication, can achieve full data confidentiality loss, arbitrary modification of data, complete denial of service or system unavailability. CISA has confirmed use of this vulnerability in known ransomware campaigns — treat as high priority for remediation. Federal agencies are required to remediate by 2022-08-15 under CISA BOD 22-01.

This is a Software Vulnerability (CWE-36) (CWE-36) vulnerability in RARLAB WinRAR. In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path. Exploitation requires local access, low attack complexity, no authentication required, and user interaction required.

Probably yes if any of these apply:

Used in known ransomware campaigns. Threat-research write-up: http://packetstormsecurity.com/files/152618/RARLAB-WinRAR-ACE-Format-Input-Validation-Remote-Code-Execution.html