CVE-2025-55188 PoC — 7-Zip 安全漏洞

Source

https://github.com/lunbun/CVE-2025-55188

Associated Vulnerability

Title: 7-Zip 安全漏洞 (CVE-2025-55188)
Description:7-Zip before 25.01 does not always properly handle symbolic links during extraction.

Description

Proof-of-Concept of CVE-2025-55188: 7-Zip Arbitrary File Write

Readme

# CVE-2025-55188: 7-Zip Arbitrary File Write
Proof-of-Concept of CVE-2025-55188

See https://lunbun.dev/blog/cve-2025-55188/ for an explanation and writeup.

`poc_lnk` contains code using the hardlink method.

`poc_vrt` contains code using the extraction root abuse method.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →