{"id":"CVE-2026-113609","kind":"vulnerability","aliases":["CVE-2026-113609"],"related":[],"title":"Bandizip: extracted PowerShell scripts lose Mark-of-the-Web, bypassing execution warnings","description":"Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. Attackers can deliver unsigned PowerShell scripts or modules in downloaded archives that run under the RemoteSigned policy when the user invokes them.","summary":"Bandizip before 7.47 does not carry the Mark-of-the-Web flag onto .ps1 and .psm1 files it extracts from archives. An attacker who ships an unsigned script in a downloaded archive can get it to run under the RemoteSigned PowerShell policy when the user invokes it.","severity":"medium","cvss":4.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bandizip","package","powershell","windows"],"not_affected_if":["bandizip-7.47-or-later","no-untrusted-archives"],"how_to_check":"- Check the installed Bandizip version in Bandizip's About dialog; versions below `7.47` are affected.\n- Extract a test archive containing a `.ps1` from a file downloaded from the internet and check whether the extracted file has a Zone.Identifier stream (`Get-Item file.ps1 -Stream *`).","fix":"- Upgrade Bandizip to `7.47` or later.\n- Until upgraded, avoid running `.ps1` or `.psm1` files extracted from untrusted archives.","status":"open","published_at":"2026-10-20T16:17:11+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","triaged_at":"2026-10-25T04:33:22+00:00","updated_at":"2026-10-25T04:33:22+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T04:33:22Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Bandizip to `7.47` or later.\n- Until upgraded, avoid running `.ps1` or `.psm1` files extracted from untrusted archives.","reach":"local","title":"Bandizip: extracted PowerShell scripts lose Mark-of-the-Web, bypassing execution warnings","impact":"medium","summary":"Bandizip before 7.47 does not carry the Mark-of-the-Web flag onto .ps1 and .psm1 files it extracts from archives. An attacker who ships an unsigned script in a downloaded archive can get it to run under the RemoteSigned PowerShell policy when the user invokes it.","category":"package","nicknames":[],"who_cares":["windows","powershell","bandizip"],"confidence":0.6,"needs_auth":"no","worst_case":"Unsigned PowerShell script runs without the zone warning","analyst_note":"","how_to_check":"- Check the installed Bandizip version in Bandizip's About dialog; versions below `7.47` are affected.\n- Extract a test archive containing a `.ps1` from a file downloaded from the internet and check whether the extracted file has a Zone.Identifier stream (`Get-Item file.ps1 -Stream *`).","needs_analyst":false,"not_affected_if":["bandizip-7.47-or-later","no-untrusted-archives"],"who_is_affected":"Windows users and teams who extract archives downloaded from the internet with Bandizip and then run PowerShell scripts from them under RemoteSigned. Systems that do not use Bandizip, or that run PowerShell under AllSigned or stricter policies, are less exposed. Teams that do not extract untrusted archives can skip it.","user_interaction":"yes","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000647,"input_tokens":3354,"output_tokens":623,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-113609':16A,19A '-2026':15A,18A '7.47':26B,74C 'allow':89C 'archiv':45B,56B,108C 'attack':47B,90C,98C 'bandisoft':71C 'bandizip':1A,20B,24B,72C 'base':95C 'bypass':11A,92C 'carri':29B 'cve':14A,17A 'deliv':100C 'download':55B,107C 'execut':12A,96C 'extract':2A,43B,84C 'fail':75C 'file':41B,88C 'flag':36B 'get':58B 'invok':70B,118C 'lose':5A 'mark':7A,32B,79C 'mark-of-the-web':6A,31B,78C 'modul':105C 'onto':37B 'packag':21B 'polici':66B,114C 'powershel':3A,22B,65B,102C 'propag':77C 'protect':97C 'ps1':38B,85C 'psm1':40B,87C 'remotesign':64B,113C 'run':61B,110C 'script':4A,52B,103C 'ship':49B 'unsign':51B,101C 'user':69B,117C 'warn':13A 'web':10A,35B,82C 'window':23B 'zone':94C 'zone-bas':93C","nicknames":[],"mitigations":[],"who_affected":"Windows users and teams who extract archives downloaded from the internet with Bandizip and then run PowerShell scripts from them under RemoteSigned. Systems that do not use Bandizip, or that run PowerShell under AllSigned or stricter policies, are less exposed. Teams that do not extract untrusted archives can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T16:17:11+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113609","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113609","severity":null,"published_at":"2026-10-20T16:17:11+00:00","modified_at":"2026-10-20T17:17:35+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}