CVE-2022-30333

CVE-2022-30333 is a directory traversal vulnerability in RARLAB UnRAR versions prior to 6.12 on Linux and UNIX systems, allowing an attacker to write arbitrary files during an extract operation, notably to create a ~/.ssh/authorized_keys file for remote access. This high-severity vulnerability (CVSS 7.5) has a low attack complexity and requires no user interaction, potentially leading to significant impact on system integrity. It is actively exploited in the wild, including in known ransomware campaigns, with public exploit modules available for Metasploit and significant community discussion and media coverage highlighting its exploitation, particularly against Zimbra servers.