PeaZip 11.4 for Windows: Safer Archive Tasks, .LNK Navigation and 7z 26.04

PeaZip 11.4 (officially tagged as version 11.4.0 on the project's GitHub repository and Launchpad announcements) arrived on October 17, 2026. Developed by Giorgio Tani, this cross-platform, LGPLv3-licensed file and archive manager continues its rapid autumn iteration cycle. Although coverage from 9to5Linux described the update as arriving two months after PeaZip 11.3, the project's GitHub release log shows 11.3.0 was published on September 26, 2026—making this a brisk three-week turnaround focused on input sanitization, backend execution hardening, updated compression engines, and a quality-of-life addition for Windows shortcut navigation.

Hardening the Scripting Engine and Dropping Console Instances​

At its core, PeaZip is a graphical wrapper and file manager that unifies command-line tools like 7-Zip/p7zip, Zstandard, Brotli, PAQ, and its native PEA format. Because PeaZip translates user actions in the GUI into command-line parameters via an internal scripting engine, how it handles untrusted file names and variable input is a major security boundary.

According to the official PeaZip 11.4.0 release notes and reporting from 9to5Linux and Linuxiac, the update overhauls how input file names are sanitized across multiple stages of the scripting engine. Specifically:

• Earlier Input Validation: Most validation checks on input file names have been moved earlier in the execution pipeline so users receive warnings about potentially dangerous operations as soon as possible.
• Reduced False Positives with Metacharacters: Improving the multi-stage sanitization logic helps the engine distinguish between legitimately complex file names containing special characters (metacharacters) and strings that could manipulate command parsing.
• Removal of Full Console Instances for Backend Tasks: PeaZip 11.4 removes the use of a full console (shell) instance when executing archiving and extraction tasks, as well as for any task that receives variable input.
• Preservation of Console Mode: Crucially for IT administrators who use PeaZip to prototype automation scripts, removing the underlying shell instance for task execution does not eliminate the application's text-only "Console" operation mode. Users can still inspect and export task definitions from the GUI as command-line scripts for batch reuse or auditing.

From a general cybersecurity and software engineering perspective, bypassing an intermediate shell or full console instance when spawning backend binaries is a textbook defense-in-depth practice. When an archive manager passes file names through a command shell, characters like ampersands, pipes, or semicolons embedded in a malicious archive's file names or folder paths risk being interpreted by the shell if escaping ever falters. Invoking the backend process directly without a full console intermediary narrows that attack surface considerably while reducing process overhead.

Section Summary: PeaZip 11.4 strengthens security by validating file names earlier, refining metacharacter handling to cut down on false alarms, and executing archiving and variable-input tasks without spawning a full console instance—all while keeping its script-exporting Console mode intact.

Legacy Archive Size Checks and Range Checking​

Not every archive format was designed for an era of multi-gigabyte log dumps and high-resolution media folders. In version 11.4, the developers introduced an initial implementation of input size validation specifically aimed at legacy archive formats, which are prone to throwing errors or failing partway through when handed excessively large files.

Alongside input size checks, PeaZip 11.4 enables extensive range checks wherever possible across the codebase. Built with the Lazarus IDE and FreePascal, PeaZip uses these boundary checks to catch out-of-range memory or integer values during archive parsing and file operations, tuned to preserve runtime performance.

Section Summary: The 11.4 update adds early input-size validation to prevent large-file failures in older archive formats and expands Pascal range checking to bolster stability without sacrificing speed.

Windows .lnk Shortcut Navigation and File Browser Refinements​

Because PeaZip doubles as a dual-pane or tabbed file manager, many users live inside its browser view when staging files for compression or organizing extracted folders. PeaZip 11.4 brings two notable usability upgrades to this workflow:

1. Following Windows .lnk Shortcuts: On Windows systems, PeaZip's file browser can now resolve and follow .lnk shortcut files directly. Rather than launching the shortcut target outside the program, Windows users can highlight a .lnk file and press Ctrl+P—or open the context menu and select Navigation > "Explore path (PeaZip)"—to jump straight to the destination inside PeaZip's file browser. If the .lnk file points to a folder, PeaZip opens that target directory; if the .lnk points to a specific file, PeaZip navigates to the file's parent directory.
2. Enhanced Auto-Refresh: The built-in file browser features improved automatic refreshing, keeping directory views more accurately synchronized when files are modified, extracted, or deleted.
3. Linux Deletion Default Fix: For users running PeaZip across mixed Windows and Linux environments, version 11.4 fixes a platform-specific quirk on Linux where the "delete after archiving/extraction" option now properly defaults to "Quick delete".

How to Use .lnk Target Navigation on Windows​

If you use Windows shortcuts to corral scattered project folders before backing them up into .7z or .zst archives, here is how the new navigation works in PeaZip 11.4:

1. Navigate to a directory containing a Windows shortcut (.lnk) inside PeaZip's main file browser.
2. Select the .lnk entry once so it is highlighted.
3. Press Ctrl+P on your keyboard, or right-click to access Navigation > "Explore path (PeaZip)".
4. PeaZip will switch the active browser pane to the target directory (or the containing parent folder if the shortcut links to an individual file), allowing you to immediately select files for archiving without leaving the app.

Section Summary: Windows users gain native .lnk path resolution inside the PeaZip file browser via Ctrl+P or the Navigation menu, accompanied by more reliable automatic folder refreshing and a corrected "Quick delete" default on Linux.

Under the Hood: 7z 26.04, Pea 1.34, and Package Verification​

An archive manager is only as capable as the compression engines underneath its hood. PeaZip 11.4 updates its primary backend utilities to 7z/p7zip 26.04 (up from 26.03 in version 11.3.0) and Pea 1.34 (up from 1.33). With this release, PeaZip supports a total of 243 archive file extensions, spanning everyday formats like .zip, .rar, .tar, and .7z as well as specialized containers like .iso, .wim, .zpaq, .br (Brotli), .zst (Zstandard), and .zim.

On the compilation side, the official source code is compiled with Lazarus 4.x while maintaining backward compatibility for developers and package maintainers building against Lazarus 3.x and 2.x.

A Important Note on Downloading and Verifying PeaZip on Windows​

PeaZip 11.4 is available in installable and portable packages for Windows (WIN64 and WINDOWS builds), macOS (Apple Silicon aarch64 and Intel x86_64), BSD, and Linux (including GTK2, GTK3, and Qt 6 builds in DEB, RPM, and portable formats).

Before grabbing the installer, Windows users should keep a critical security advisory from the PeaZip project in mind: official PeaZip packages are not digitally signed with an Authenticode certificate, which means Windows SmartScreen may flag the installer on first run. Furthermore, the project explicitly warns on its official GitHub Pages portal (peazip.github.io) that third-party domains (such as peazip.com) and unauthorized Microsoft Store listings are not affiliated with the PeaZip project.

To stay safe when updating to PeaZip 11.4.0 on Windows:

• Download binaries only from the project's official GitHub Releases page or its official SourceForge repository linked from peazip.github.io.
• Verify your download using PowerShell (Get-FileHash.\peazip-11.4.0.WIN64.exe -Algorithm SHA256) against the official hashes published on the GitHub release page (7c7e70f4bb64b0f8e6f088c33bb14d7791d9a7c1a762d062f3bfec1bbb8ac9d3 for the 64-bit Windows installer, or fbf48c7a76a12d94f400fe99ebe241495e0fd3ae133f0eebbef69037e9f897e0 for the WINDOWS.exe package).

For those who regularly juggle encrypted archives, multi-format extraction, or portable admin toolkits on a USB drive, PeaZip 11.4 is a clean, worthwhile maintenance update that tightens backend security while making Windows folder navigation a little faster.