CVE-2025-55188-7z-exploit

---

7-Zip Symlink Arbitrary File Write PoC (CVE-2025-55188)

Description

This proof-of-concept demonstrates CVE-2025-55188, a vulnerability in 7-Zip versions prior to 25.01. The flaw occurs because 7-Zip does not properly handle symbolic links during extraction, allowing a crafted archive to overwrite arbitrary files on the target system.

If a victim extracts a malicious archive, the attacker can:

• Overwrite sensitive files (e.g., .bashrc, ~/.ssh/authorized_keys, configuration files).
• Potentially gain code execution or unauthorized access.

---

How it Works

1. An attacker creates a symbolic link pointing to a target file outside the extraction directory.
2. The link is added to a tar archive along with a payload file.
3. When the archive is extracted with a vulnerable version of 7-Zip, the symlink is followed, and the payload overwrites the target file.

---

Requirements