Update now: 7-Zip fixes RCE flaw exploitable with malicious archives

7-Zip has released version 26.02 to address a critical remote code execution vulnerability in its XZ decompression functionality. The flaw, stemming from a heap-based buffer overflow, could allow attackers to execute arbitrary code if a user opens a specially crafted archive. While no active exploitation has been reported, the lack of an automatic update mechanism increases the risk of prolonged exposure for unpatched systems.

AI-extracted · verify before operational use