Windows users should update 7-Zip to version 25.00 or later to fix two significant “path traversal” vulnerabilities (CVE-2025-11001 and CVE-2025-11002) that can allow remote code execution, caused by the handling of symbolic links in ZIP files.
    • Hellfire103@lemmy.caOPEnglish
      2·
      16 days ago

      I guess? It’s to do with Unix-Windows path conversions, so I assume Unix-like systems aren’t affected.