CVE-2025-0411 7-Zip 7-Zip: security feature bypass
In plain words: A built-in safety check — like a warning before opening a downloaded file — can be skipped. Makes other attacks, like malicious downloads, work without the usual warning.
Confirmed exploited by CISA on · US federal patch deadline Feb 27, 2025
What to do
- Install 7-Zip's security update for 7-Zip. If no update exists, follow the vendor's workaround or stop using the product until one ships.
- Turn on automatic updates for the operating system and for Office, PDF and archive apps.
- Be careful with unexpected attachments — documents, .zip/.rar files and shortcuts are common bait.
- Use a normal (non-admin) account day to day and keep built-in protection like Microsoft Defender on.
Who is affected
Could reach you. This one is aimed at devices or apps of the kind people own.
What's at risk: Your files, saved passwords and accounts. Many of these let a program that is already running gain full administrator control.
The details
- Official name
- 7-Zip Mark of the Web Bypass Vulnerability
- Product
- 7-Zip 7-Zip
- CISA description
- 7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.
- Type of flaw
- Security feature bypass (CWE-693)
- Confirmed exploited
- Feb 6, 2025
- US federal patch deadline
- Feb 27, 2025
Ask Cleus about it
Ask about a vulnerability, an update, a weird message, or the news. Plain-word answers, free, no account.
Answering about CVE-2025-0411 ·
Questions about CVE-2025-0411
Is CVE-2025-0411 being exploited?
Yes. CISA added CVE-2025-0411 to its Known Exploited Vulnerabilities catalog on Feb 6, 2025, which means there is reliable evidence of real-world attacks.
How do I fix CVE-2025-0411?
Install 7-Zip's security update for 7-Zip. If no update exists, follow the vendor's workaround or stop using the product until one ships. Turn on automatic updates for the operating system and for Office, PDF and archive apps.
Am I affected by CVE-2025-0411?
Only if you use 7-Zip 7-Zip. This one is aimed at devices or apps of the kind people own.