Loi 7-Zip co the vuot qua canh bao Mark-of-the-Web
Mot file RAR5 bi che tao co the khien 7-Zip cho Windows xoa Mark-of-the-Web (MotW) khi giai nen mot file, nen mot chuong trinh da tai ve luot qua cac canh bao SmartScreen va Che do Xem Bao ve cua Office - von bao ve cac file den tu internet. Loi nay duoc dinh danh la CVE-2026-58052 va anh huong den 7-Zip toi phien ban 26.02, ban hien tai. Neu ban mo file tu nguoi ban khong quen, dieu nay thay doi muc do can than khi giai nen mot file.
Last reviewed: 2026-07-18
Chuyen gi da xay ra
National Vulnerability Database cong bo CVE-2026-58052 vao 2026-06-27. 7-Zip chan luong Zone.Identifier do file cung cap bang cach so khop ten chinh xac "Zone.Identifier", nhung ban ghi luong RAR5 ten ":Zone.Identifier:$DATA" lai khong bi phat hien. NTFS quy chuan no ve cung mot luong va ghi de dau moc internet bang vung zero, nen file giai nen khong con giong den tu web. Mot ban ghi thu hai ten "::$DATA" co the ghi de noi dung file. Ket qua la mot file danh bai cac kiem tra SmartScreen va MotW.
Kiem tra vao 18 July 2026, loi co diem CVSS 4.0 = 4.8 va van con mo: ban 7-Zip moi nhat van la 26.02 (2026-06-25) va chua co ban va nao duoc phat hanh tinh den luc viet bai. Day la van de rieng biet voi loi truoc do trong ban ghi phuc hoi cua WinRAR; no anh huong rieng 7-Zip, tren cac he Windows giai nen vao o dia NTFS.
| Chi tiet | Gia tri |
|---|---|
| Dinh danh | CVE-2026-58052 |
| Anh huong | 7-Zip cho Windows toi 26.02 |
| Kich hoat | Giai nen mot file RAR5 bi che tao tren NTFS |
| Tac dong | Mark-of-the-Web bi xoa; vuot SmartScreen / Che do Bao ve |
| Trang thai | Chua va tinh den 2026-07-18 (moi nhat 26.02) |
Vi sao dieu nay quan trong voi file hang ngay
Mark-of-the-Web la dau lang le Windows them vao moi thu ban tai ve; no khien SmartScreen canh bao truoc khi trinh cai chay va khien Office mo tai lieu trong Che do Xem Bao ve. Khi mot file xoa duoc dau do luc giai nen, chuong trinh lay tu file RAR5 ai do gui co the khoi chay ma khong canh bao. Rui ro cao nhat o thoi quen trang nay huong toi: mo file den qua email, chat, hoac lien ket tai ve bat ky. No khong anh huong file ban tu nen.
Nen lam gi voi file cua ban ngay bay gio
Cho toi khi mot ban 7-Zip da sua duoc phat hanh, cac buoc sau giu rui ro trong tam kiem soat:
- Khong giai nen file RAR5 tu nguoi gui ban khong tin tuong bang 7-Zip 26.02 tro ve truoc tren Windows. Hay xac minh file bang cach khac truoc.
- Theo doi ban 7-Zip ke tiep tren trang tai ve chinh thuc 7-zip.org va cap nhat ngay khi co ban sau 26.02.
- Xem truoc noi dung mot file dang ngo. Cong cu giai nen va huong dan giai ZIP RAR 7Z cho ban thay file chua gi truoc khi giai nen tren may cua ban.
- Giu SmartScreen va Che do Bao ve bat. Do la cac kiem tra ma loi nay nham vao, nen chung van quan trong voi moi lan tai ve khac.
Sources
- NVD - CVE-2026-58052 (checked 2026-07-18)
- MITRE CVE Record - CVE-2026-58052
- VulnCheck advisory (assigning CNA)
- 7-Zip release history (latest 26.02, 2026-06-25)