Windows users should update 7-Zip to version 25.00 or later to fix two significant “path traversal” vulnerabilities (CVE-2025-11001 and CVE-2025-11002) that can allow remote code execution, caused by the handling of symbolic links in ZIP files.
  • Hellfire103@lemmy.caOPEnglish
    0·
    10 days ago

    I guess? It’s to do with Unix-Windows path conversions, so I assume Unix-like systems aren’t affected.