PeaZip releases 11.4.0 with security hardening

PeaZip has released version 11.4.0, a security-focused update for the open-source, cross-platform file archiver. Developed by Giorgio Tani, this release aims to harden the software against vulnerabilities following previous remote code execution (RCE) bugs, such as CVE-2026-102514.

A major technical change in this version is the removal of full console subprocesses for archiving and extraction tasks. By eliminating the reliance on terminal environments like cmd or bash for these processes, the update mitigates a significant class of command-injection risks where untrusted data within an archive could be executed as shell commands.

Additional improvements include stricter input validation, enabled range checking, and updated backends including 7z/p7zip 26.04 and Pea 1.34. The software continues to serve as a free alternative to WinRAR and WinZip, supporting over 200 file formats and offering advanced security features such as AES, Twofish, and Serpent encryption.