Junglewise Threat Intelligence

CVE-2026-28208: Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix

CVE-2026-28208 · Severity: low · CVSS 3.1 · Published 2026-02-27

Technologies: com.github.junrar:junrar (Maven). Vendors: Maven.

Executive brief

Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix

Affected products

  • Maven com.github.junrar:junrar

Related threats