CVE-2025-55188
BaseFortify
Publication date: 2025-08-08
Last updated on: 2025-11-04
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| 7-zip | 7-zip | to 25.01 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-59 | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in 7-Zip versions before 25.01 involves improper handling of symbolic links during file extraction. This means that when extracting archives, 7-Zip may not correctly process symbolic links, potentially leading to unexpected behavior.
How can this vulnerability impact me? :
The vulnerability could allow an attacker to influence the extraction process via symbolic links, potentially causing limited integrity issues. However, the impact is low severity with no confidentiality or availability impact, and requires local access with high attack complexity and user interaction.