PeaZip 11.4.0 has been released as a security-focused update, addressing previously identified remote-code-execution vulnerabilities by implementing stricter input validation and eliminating the use of full console subprocesses for archiving and extraction. This update aims to close command-injection risks and improve overall security, following the significant fixes in version 11.3.0, which included addressing various exploitable memory corruption bugs. In addition to security enhancements, the new release introduces features like improved file-browser auto-refresh and Windows .lnk navigation, offering a safer way to handle shortcuts. Users are encouraged to upgrade to this version due to its crucial security improvements and various feature updates, making it a valuable tool for file archiving

PeaZip 11.4.0 Released: Security Hardening After RCE Vulnerabilities

PeaZip 11.4.0, released today by developer Giorgio Tani, is primarily a security-focused update that adds stricter input validation and enables range checking. Its biggest move drops the use of full console subprocesses for archiving and extraction, shutting down a class of command-injection flaws. The patch also improves file-browser auto-refresh, adds Windows .lnk navigation via Ctrl+P, and bumps backends to 7z/p7zip 26.04 and Pea 1.34. This follows 11.3.0's fixes for several exploitable RCE bugs, including a cross-platform out-of-bounds write (CVE-2026-102514).

PeaZip 11.4.0 Released: Security Hardening After RCE Vulnerabilities @ NT Compatible