CISA has added CVE-2025-6218, a path traversal vulnerability in WinRAR file archiver, to its Known Exploited Vulnerabilities catalog due to evidence of active exploitation. The vulnerability has a CVSS score of 7.8 and could enable code execution. Multiple threat groups are actively exploiting this security flaw in the popular file compression utility. The vulnerability represents a significant threat given WinRAR's widespread usage and the confirmed active exploitation by cybercriminals.