Arbitrary file write via backslash path traversal

Path traversal in junrar before 7.5.8 allows remote attackers to write arbitrary files via crafted RAR extraction on Linux/Unix. LocalFolderExtractor canonicalizes the raw archive name while backslashes remain literal, then splits that name on backslashes, turning hidden parent segments into directories after the containment check. Exposure requires a Linux/Unix application to extract an attacker-supplied RAR through the directory-writing API; exploitation overwrites files writable by that process and can trigger code execution through security-sensitive targets.