CVE-2022-30333

RARLAB UnRAR on Linux/UNIX allows attackers to write arbitrary files during extraction due to a directory traversal vulnerability.

An attacker can exploit this flaw by crafting a malicious archive that, when extracted, overwrites system or application files. This is a critical, actively exploited vulnerability linked to ransomware campaigns, meaning DIB organizations must ensure UnRAR is patched or replaced to prevent supply-chain compromise and data integrity loss.

Shame score — A critical, actively exploited directory traversal flaw linked to ransomware that allowed arbitrary file writes, representing a severe, avoidable supply-chain risk.