NHS Warns of PoC Exploit for 7-Zip Symbolic Link–Based RCE Vulnerability
Summary: NHS England Digital issued an advisory on Tuesday stating that active exploitation of CVE-2025-11001, a 7-Zip flaw with a CVSS score of 7.0, has been observed in the wild, though the story was later updated to note the vulnerability is not under active exploitation as previously mentioned. The flaw, fixed in 7-Zip version 25.00 released in July 2025, involves symbolic link handling in ZIP files that lets crafted data cause directory traversal and code execution in the context of a service account, and a proof-of-concept exploit has been released.
Why it matters: A public proof-of-concept exists for a flaw that can execute code as an elevated user or service account on Windows, and the advisory's exploitation claim was retracted after publication - leaving security leaders to verify their own exposure rather than rely on the initial warning.
Read the original at The Hacker News ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2025-11001CVE-2025-11002
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026