BeyondMachines :verified: (@[email protected])

7-Zip vulnerability enables remote code execution through malicious ZIP files A critical directory traversal vulnerability (CVE-2025-11001) in 7-Zip allows remote code execution on Windows systems when users open malicious ZIP files, with a public proof-of-concept exploit available since October 2025. Although patched in version 25.00 (July 2025), the lack of automatic updates means many systems remain vulnerable and require immediate manual upgrade to version 25.01. **Update your 7-Zip software on Windows to version 25.01 or later ASAP. There's an vulnerability that is exploitable just by opening a malicious ZIP file. And there's a public exploit PoC, so criminals can just copy it in their attacks. Don't ignore this one** #cybersecurity #infosec #advisory #vulnerability https://beyondmachines.net/event_details/7-zip-vulnerability-enables-remote-code-execution-through-malicious-zip-files-k-o-8-v-x/gD2P6Ple2L