CVEvulnerability

CVE-2025-41244

7.8 HIGH Known exploited Published 2025-09-29 Modified 2026-10-18 Official page ↗

CISA Known Exploited Vulnerability

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability — Broadcom VMware Aria Operations and VMware Tools

Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

Added to KEV
2025-10-30
Remediation due
2025-11-20
Ransomware use
Unknown
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149 ; https://nvd.nist.gov/vuln/detail/CVE-2025-41244
Status
Analyzed
Published
2025-09-29
Last modified
2026-10-18
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-267

Description

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

Affected configurations

• vmware aria operations (>= 8.0 < 8.18.5) • vmware cloud foundation (>= 4.0 <= 5.2.2) • vmware cloud foundation operations 9.0 • vmware open vm tools (>= 11.2.0 < 12.5.4) • vmware open vm tools 13.0.0 • vmware telco cloud infrastructure (>= 2.2 <= 3.0) • vmware telco cloud platform (>= 4.0 < 5.0.1) • debian debian linux 11.0 • vmware tools (>= 12.5.0 < 12.5.4) • vmware tools (>= 13.0.0.0 < 13.0.5.0)

Related

Weakness · CWE (1)

  • CWE-267 Privilege Defined With Unsafe Actions weakness

References