Wide-ranging 7-Zip vulnerability with 8.8 CVE rating allows for code execution — hundreds of millions of machines potentially at risk

7-Zip has an 8.8-rated vulnerability in its archive-opening code that can lead to code execution when a crafted file is opened.

The flaw affects multiple archive types and platforms, including the main app, command-line tools, bundled libraries, and older Linux ports like p7zip.

Attackers do not need the user to extract the file; simply opening a malicious archive may be enough to trigger the issue.

Users and admins are advised to upgrade to 7-Zip 26.01 as soon as possible.