VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-open-vm-toolsamazon-linux-ami-2-upgrade-open-vm-tools-debuginfoamazon-linux-ami-2-upgrade-open-vm-tools-desktopamazon-linux-ami-2-upgrade-open-vm-tools-develamazon-linux-ami-2-upgrade-open-vm-tools-salt-minionamazon-linux-ami-2-upgrade-open-vm-tools-sdmpamazon-linux-ami-2-upgrade-open-vm-tools-test | May 30, 2025 | May 12, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-open-vm-toolsamazon-linux-2023-upgrade-open-vm-tools-debuginfoamazon-linux-2023-upgrade-open-vm-tools-debugsourceamazon-linux-2023-upgrade-open-vm-tools-desktopamazon-linux-2023-upgrade-open-vm-tools-desktop-debuginfoamazon-linux-2023-upgrade-open-vm-tools-develamazon-linux-2023-upgrade-open-vm-tools-salt-minionamazon-linux-2023-upgrade-open-vm-tools-sdmpamazon-linux-2023-upgrade-open-vm-tools-sdmp-debuginfoamazon-linux-2023-upgrade-open-vm-tools-testamazon-linux-2023-upgrade-open-vm-tools-test-debuginfo | Jun 3, 2025 | May 12, 2025 | |
| Debian | debian-upgrade-open-vm-tools | May 15, 2025 | May 15, 2025 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | May 12, 2025 | |
| Suse | — | suse-upgrade-libvmtools-develsuse-upgrade-libvmtools0suse-upgrade-open-vm-toolssuse-upgrade-open-vm-tools-containerinfosuse-upgrade-open-vm-tools-desktopsuse-upgrade-open-vm-tools-salt-minionsuse-upgrade-open-vm-tools-sdmp | Dec 5, 2025 | May 29, 2025 |
| Ubuntu | ubuntu-pro-upgrade-open-vm-toolsubuntu-upgrade-open-vm-tools | May 14, 2025 | May 13, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | May 12, 2025 | |
| Vmware Vmware Tools | vmware-tools-upgrade-latest | Jun 3, 2025 | May 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub