What’s Vulnerable › Products

junrar vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your junrar version is affected

Latest junrar vulnerabilities

• CVE-2026-97370 — Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction (CVSS 7.5)
• CVE-2026-86071 — Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root (CVSS 3.7)
• CVE-2026-41245 — Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix (CVSS 7.5)
• CVE-2026-28208 — Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix (CVSS 5.9)
• CVE-2022-23596 — Infinite loop in junrar (CVSS 7.5)
• CVE-2018-12418 — (CVSS 5.5)