WinRAR 7.13 Final released

1. Critical vulnerability CVE-2025-8088. Directory traversal vulnerability affecting the Windows versions of WinRAR, UnRAR, and associated components. The vulnerability allows specially crafted archives to bypass the user-specified extraction path and write files to unintended locations on the file system. This issue is distinct from the previously fixed vulnerability in version 7.12 and required immediate action.
    
   The flaw affects:
    
   WinRAR (Windows)
    
   RAR and UnRAR (Windows)
    
   UnRAR.dll and portable UnRAR (Windows)
    
   Other platforms — including Linux/Unix builds and RAR for Android — are not affected.
    
   We are thankful to Anton Cherepanov, Peter Kosinar, and Peter Strycek from ESET for letting us know about this security issue.
    
   https://www.eset.com/us/about/newsroom/research/eset-research-russian-romcom-group-exploits-new-vulnerability-targets-companies-in-europe-and-canada/
    
   Beyond security, WinRAR continues to be trusted by technical users worldwide for its advanced handling of NTFS features. WinRAR offers built-in options to preserve symbolic links as links, and to archive Alternate Data Streams (ADS) when working with NTFS volumes. These capabilities are especially valuable in backup, deployment, and forensic environments and is going beyond what most other compression tools provide.
    
   
2. Bugs fixed:
    
   
   1. WinRAR 7.12 "Import settings from file" command failed to restore settings, saved by WinRAR versions preceding 7.12;
       
      
   2. WinRAR 7.12 set a larger than specified recovery size for compression profiles, created by WinRAR 5.21 and older.
       
      

About win.rar GmbH:
win.rar GmbH has been the official distributor of WinRAR and RARLAB products since February 2002 and handles all support, marketing and sales related to WinRAR & rarlab.com. win.rar GmbH is registered in Germany and is represented worldwide by local partners in more than 40 countries on six continents. win.rar's declared objective is to provide first-class quality support and to optimize its software to meet customer's requirements in accordance with their valued feedback. For more information about WinRAR and win.rar GmbH please visit our website: www.win-rar.com