A vulnerability (CVE-2025-0411) has been discovered in 7-Zip file archiver software allowing attackers to bypass the Mark-of-the-Web protection mechanism.
The vulnerability has a 7.0 CVSS rating and was quickly fixed, but users without automatic updates may still have a vulnerable version.
Attackers can exploit the vulnerability to launch malicious code with user privileges, making it a potential risk in complex attacks.
To stay safe, users are advised to update to version 24.09 or newer and handle files from the internet with caution.