Still using WinRAR? It has a worrying security flaw that could let hackers hijack your Windows device

• Security researchers uncover new flaw in WinRAR
• The flaw allowed threat actors to bypass Mark of the Web and deploy malware to Windows devices without warning
• WinRAR released a new version to fix the bug, so update now

Experts have uncovered a flaw in WinRAR which could allow threat actors to bypass the Mark of the Web (MotW) and deploy malware on people’s computers.

The vulnerability was discovered by Japanese researcher Shimamine Taihei from the Mitsui Bussan Secure Directions, and is now tracked as CVE-2025-31334, and was given a severity score of 6.8/10 (medium).