WinRAR is perhaps best known for its endless “please pay” prompt, even though you could keep using it for free indefinitely. It remains one of the most popular unarchiving tools available on Windows; however, it has recently seen a significant vulnerability.
A newly discovered WinRAR zero-day vulnerability is being actively exploited, according to ESET Security Researchers, who found the vulnerability. Tracked as CVE-2025-8088, the flaw has been linked to a Russian-aligned hacking group known as RomCom, which has a history of targeting governments, infrastructure, and non-governmental organizations.
