Security Research

CVE-2025-11001 7-Zip ZIP Parsing Directory Traversal to RCE: Symlink Converging With the Extraction Path

#Vulnerability Analysis#Code Audit#Malware
CVE-2025-11001 7-Zip ZIP Parsing Directory Traversal to RCE: Symlink Converging With the Extraction Path

7-Zip treats symlink entries inside a ZIP as ordinary directory entries — the attacker crafts a three-layer structure of “directory + symlink + malicious file”, the symlink points to a sensitive system path, and when the victim extracts, the malicious file lands wherever the symlink points.

Unlock to view this content.