National Cybersecurity Reporting Center: WinRAR security vulnerability can bypass Windows security warnings and execute malware

PANews reported on April 21 that recently, the Japanese security team CSIRT exposed a security vulnerability in WinRAR that can bypass Microsoft Windows' MarkoftheWeb (MoTW) security mechanism. This vulnerability could potentially allow users to unknowingly execute malicious programs from the internet, posing a serious security risk. The vulnerability is numbered CVE-2025-31334. To proactively address the cybersecurity challenges posed by the WinRAR security vulnerability to critical infrastructure, the following technical measures are recommended: First, conduct a comprehensive investigation of computer network devices involving the vulnerability among WinRAR users and promptly install the latest version. Second, reset the WinRAR client configuration. Third, advise WinRAR users to avoid connecting to untrusted networks when handling sensitive data.