CVE-2026-41245 | Junrar up to 7.5.9 RAR LocalFolderExtractor path traversal

A vulnerability marked as critical has been reported in Junrar up to 7.5.9. Affected is the function LocalFolderExtractor of the component RAR Handler. The manipulation leads to path traversal.

This vulnerability is listed as CVE-2026-41245. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.