LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

LOW CWE-59

CVE-2025-55188

7-Zip 7-Zip vulnerability

3.6/ 10

CVSS 3.1

Low severity

1.0%

EPSS exploit odds

Chance of exploitation in the next 30 days

Higher than 65% of all CVEs

Not listed

CISA KEV catalog

No confirmed in-the-wild exploitation on CISA's list.

Timeline

Published: Aug 8, 2025
Updated: Nov 4, 2025
First covered: Jul 3, 2026
Latest story: 4 months ago

Summary

7-Zip before 25.01 does not always properly handle symbolic links during extraction.

CWE-59Improper Link Resolution Before File Access ('Link Following')

Attack profile

Attack vectorLocal

ComplexityLow

PrivilegesNone

User interactionRequired

ScopeChanged

ConfidentialityNone

IntegrityLow

AvailabilityNone

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Affected products

7-Zipbefore 25.01

References

CVE.org recordcve.org NVD entrynvd.nist.gov Advisorysourceforge.net Advisorygithub.com Advisorygithub.com Advisoryopenwall.com Advisoryyoutu.be Advisorylunbun.dev Advisorygithub.com Advisoryvicarius.io