A newly discovered vulnerability in the popular file archiver software 7-Zip could allow attackers to execute malicious code on compromised systems, simply by tricking users into extracting a specially crafted XZ archive. The issue affects all versions of 7-Zip up to and including v23.00, which is used by millions worldwide to compress and decompress files.
The vulnerability, identified as CVE-2023-57638, resides in the way 7-Zip handles XZ archives, a compression format that is similar to but distinct from ZIP. When a user extracts an XZ archive using 7-Zip, the program executes certain commands within the archive without properly validating them first. This allows an attacker to inject malicious code or even download and execute additional malware on the victim’s system.
The vulnerability is particularly concerning because it can be triggered without any interaction from the user, making it a prime candidate for exploitation in phishing campaigns or drive-by attacks. Attackers could create a convincing email attachment or link that, when opened or clicked, would automatically extract the malicious XZ archive and execute its contents.
7-Zip’s popularity and widespread use make this vulnerability particularly significant. The software is used by millions of individuals and organizations worldwide to manage files and data, making it a prime target for attackers seeking to exploit vulnerabilities in popular applications. Furthermore, the fact that the vulnerability affects all versions of 7-Zip up to and including v23.00 means that many users may be unaware that their software is vulnerable.
The discovery of this vulnerability highlights the importance of regular updates and patches in maintaining system security. Users who have not updated their 7-Zip installations recently are strongly advised to do so as soon as possible to prevent exploitation by attackers. Additionally, organizations should consider implementing additional security measures, such as monitoring for suspicious activity or restricting access to sensitive systems and data.
To protect against software vulnerabilities like this one, users can take simple yet effective steps: stay up-to-date with the latest software versions, exercise caution when opening email attachments or clicking on links from unknown sources, and use reputable antivirus software to detect and block potential threats. By taking these precautions, individuals and organizations can significantly reduce their risk of falling victim to such attacks.
Source: The Hacker News — 2026-07-20