7-ZIP 25.01 released to patch CVE-2025-55188 vulnerability

You have to manually download and install Download

Vulnerability Fixed:
Version 25.01 contains a fix for the CVE-2025-55188 vulnerability, which could allow for arbitrary file write and code execution.
Symbolic Link Handling:
The update changes how 7-Zip handles symbolic links during archive extraction, which is the cause of the vulnerability.
Important Precautions:
Update Immediately:
Organizations and individuals should prioritize updating to 7-Zip 25.01 or a newer version as soon as possible.
Download from Official Sources:
Only download 7-Zip from the official website to ensure you're getting the legitimate and patched version.
Exercise Caution with Untrusted Archives:
Even with the patch, it's always a good practice to be cautious and avoid extracting archives from unknown or untrusted sources.

It does not have to be manually downloaded!

An update can be performed using winget. One of the things I routinely do after a Windows update is run these two commands from a Windows command line:
1. winget upgrade
2. winget upgrade --all
The first shows any app that have updates, and the second initiates and performs the upgrade. 7-Zip was one of the recent ones. There are other winget commands such as selecting what specific app to upgrade, and many more.

This is a lot safer that getting the download from some untrusted source.