PoC Exploit for 7-Zip Vulnerabilities that Allows Remote Code Execution

A proof-of-concept exploit for two 7-Zip flaws (CVE-2025-11001 and CVE-2025-11002) demonstrates how improper symlink handling during ZIP extraction on Windows can be abused to perform path traversal and write arbitrary files (potentially leading to code execution). The issues affect 7-Zip versions 21.02 through 24.09, have CVSS v3.0 scores of 7.0, and are fixed in 25.00; users are advised to update immediately, disable symlink support where possible, and scan archives.