Actively exploited in the wild
RARLAB UnRAR Directory Traversal Vulnerability
RARLAB - UnRAR · Listed in the CISA KEV since 2022-08-09. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2022-30333
HighCVSS 7.5KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
Risk Assessment
An attacker can exploit the vulnerability to overwrite user files, potentially leading to unauthorized system access (e.g., via SSH keys).
Recommendation
Update UnRAR to version 6.12 or later and be cautious when extracting archives from untrusted sources.
Original NVD description (English source)
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.