CVE-2025-11001

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26753.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
zdiCNA
7 HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
VendorProductVersion
7-zip7-zip
24.09
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
7zip
bookworm
no-dsa
bullseye
postponed
trixie
25.01+dfsg-1~deb13u1
fixed
forky
25.01+dfsg-5
fixed
sid
25.01+dfsg-5
fixed
p7zip
bookworm
no-dsa
bullseye
postponed
trixie
16.02+transitional.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
7zip
questing
not-affected
plucky
needs-triage
noble
needs-triage
jammy
needs-triage
p7zip
questing
not-affected
plucky
not-affected
noble
not-affected
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
trusty
needs-triage
Common Weakness Enumeration
References
https://www.zerodayinitiative.com/advisories/ZDI-25-949/