CVE-2025-55188 PoC — 7-Zip 安全漏洞

Source

https://github.com/lunbun/CVE-2025-55188

Associated Vulnerability

Title:7-Zip 安全漏洞 (CVE-2025-55188)
Description:7-Zip是7-Zip开源的一个压缩软件。 7-Zip 25.01之前版本存在安全漏洞，该漏洞源于解压时未正确处理符号链接。

Description

Proof-of-Concept of CVE-2025-55188: 7-Zip Arbitrary File Write

Readme

# CVE-2025-55188: 7-Zip Arbitrary File Write
Proof-of-Concept of CVE-2025-55188

See https://lunbun.dev/blog/cve-2025-55188/ for an explanation and writeup.

`poc_lnk` contains code using the hardlink method.

`poc_vrt` contains code using the extraction root abuse method.

File Snapshot


 [4.0K]  /data/pocs/8e83aa488b2f95127da90effc39a1ba372d955a2
├── [4.0K]  poc_lnk
│   ├── [ 983]  rce.py
│   ├── [ 10K]  rce.tar
│   ├── [ 10K]  write.tar
│   └── [ 788]  write_tar.py
├── [4.0K]  poc_vrt
│   ├── [ 825]  rce.py
│   ├── [ 10K]  rce.tar
│   ├── [ 260]  write.7z
│   ├── [ 416]  write_7z.sh
│   ├── [ 228]  write.rar
│   ├── [ 422]  write_rar.sh
│   ├── [ 10K]  write.tar
│   ├── [ 688]  write_tar.py
│   ├── [ 363]  write.zip
│   └── [ 684]  write_zip.py
└── [ 274]  README.md

2 directories, 15 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!