22793.rar May 2026

The flaw existed in unacev2.dll , a third-party library WinRAR used to unpack files. Path Traversal: Attackers could bypass folder restrictions.

This vulnerability allowed attackers to execute code remotely by simply having a user extract a specially crafted archive. 🛡️ The Vulnerability: CVE-2018-20250 22793.rar

No complex exploit was needed; the Windows Startup folder handled the execution. The flaw existed in unacev2

WinRAR failed to properly sanitize these paths, allowing the file to be written outside the intended extraction folder. ⚠️ Security Implications The flaw existed in unacev2.dll

The file is a well-known proof-of-concept (PoC) archive used to demonstrate a critical vulnerability in WinRAR (tracked as CVE-2018-20250 ).

RARLAB removed unacev2.dll entirely to fix the issue.