Skip to content
Sign in
5.9 Medium

CVE-2026-41245 Junrar is an open source java RAR archive library

Description

Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archive is extracted. Version 7.5.10 fixes the issue.

Affected products and versions

Product Affected versions Fixed in
junrar 7.5 earliest → < 7.5.10 7.5.10
Red Hat Fuse 7 Versions not published
Red Hat JBoss Enterprise Application Platform 8 Versions not published
Red Hat JBoss Enterprise Application Platform Expansion Pack Versions not published

Other CVEs of junrar

The 4 CVEs of junrar →
CVE-2026-97370 Junrar is an open source Java RAR archive library 7.5 High CVE-2026-86071 Junrar is an open source Java RAR archive library 3.7 Low CVE-2026-28208 Junrar is an open source java RAR archive library 5.9 Medium
Track this CVE