CVE-2025-11001 PoC — 7-Zip 路径遍历漏洞

Source

Associated Vulnerability

Description

Exploit for CVE-2025-11001 or CVE-2025-11002

Readme

# Usage:

```
python3 exploit.py -t "C:\Users\pac\Desktop" -o demo.zip --data-file calc.exe
```

# Exploiting 7-zip

The vulnerability is only exploitable on windows and has one major caveat.The bug can only be exploited when 7-Zip is ran with Admin privileges for this vulnerability to be succesfully exploited. This is because it the 7-zip process creates a symlink, which is a privileged operation on windows. 

Hence the exploitation only makes sense when 7-Zip is used by a service account.

You can find more info about the vulnerability in my blog post [https://pacbypass.github.io/2025/10/16/diffing-7zip-for-cve-2025-11001.html](https://pacbypass.github.io/2025/10/16/diffing-7zip-for-cve-2025-11001.html)

Vulnerable versions: 21.02 - 25.00

File Snapshot

 [4.0K]  /data/pocs/f86ef533bcaee90309643a6ef0568de437679ec6
├── [2.3K]  exploit.py
└── [ 751]  README.md

1 directory, 2 files

Remarks