CVE-2025-3445

CVE-2025-3445 describes a Path Traversal "Zip Slip" vulnerability in the mholt/archiver Go library, specifically impacting its Unarchive functionality when processing crafted ZIP files. This allows an attacker to create or overwrite sensitive files on the system with the privileges of the executing application, potentially leading to privilege escalation or code execution. With a CVSS score of 8.1 (HIGH), the vulnerability has a network attack vector and high integrity impact, though it requires high attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.