CVE-2025-8088 is a high-severity path traversal flaw in WinRAR for Windows. Exploited as a zero-day by Russian APT groups RomCom and Paper Werewolf.