VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade open-vm-tools-salt-minionUpgrade open-vm-tools-sdmpUpgrade open-vm-toolsUpgrade open-vm-tools-desktopUpgrade open-vm-tools-test | Oct 10, 2025 | Oct 7, 2025 |
| Amazon Linux Ami 2 | — | Upgrade open-vm-tools-testUpgrade open-vm-tools-develUpgrade open-vm-tools-debuginfoUpgrade open-vm-tools-sdmpUpgrade open-vm-toolsUpgrade open-vm-tools-desktopUpgrade open-vm-tools-salt-minion | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade open-vm-tools-desktopUpgrade open-vm-tools-debugsourceUpgrade open-vm-tools-test-debuginfoUpgrade open-vm-tools-salt-minionUpgrade open-vm-tools-sdmpUpgrade open-vm-tools-testUpgrade open-vm-tools-develUpgrade open-vm-tools-desktop-debuginfoUpgrade open-vm-toolsUpgrade open-vm-tools-sdmp-debuginfoUpgrade open-vm-tools-debuginfo | Oct 16, 2025 | Sep 29, 2025 |
| Debian | — | Upgrade open-vm-tools | Oct 2, 2025 | Oct 2, 2025 |
| Dell Powerstore Dsa2026115 | — | Upgrade Dell PowerStoreOS to the latest version | Feb 25, 2026 | Feb 24, 2026 |
| Oracle_linux | — | Upgrade open-vm-tools-desktopUpgrade open-vm-tools-testUpgrade open-vm-tools-sdmpUpgrade open-vm-toolsUpgrade open-vm-tools-salt-minion | Oct 9, 2025 | Sep 29, 2025 |
| Redhat_linux | — | Upgrade open-vm-tools-test-debuginfoUpgrade open-vm-tools-desktop-debuginfoUpgrade open-vm-tools-debugsourceUpgrade open-vm-tools-desktopUpgrade open-vm-tools-testUpgrade open-vm-tools-debuginfoUpgrade open-vm-toolsUpgrade open-vm-tools-salt-minionUpgrade open-vm-tools-sdmpUpgrade open-vm-tools-sdmp-debuginfo | Oct 8, 2025 | Sep 29, 2025 |
| Rocky_linux | — | Upgrade open-vm-tools-testUpgrade open-vm-tools-sdmp-debuginfoUpgrade open-vm-tools-debuginfoUpgrade open-vm-tools-desktop-debuginfoUpgrade open-vm-tools-test-debuginfoUpgrade open-vm-tools-debugsourceUpgrade open-vm-tools-sdmpUpgrade open-vm-tools-desktopUpgrade open-vm-toolsUpgrade open-vm-tools-salt-minion | Feb 5, 2026 | Oct 8, 2025 |
| Suse | — | Upgrade libvmtools-develUpgrade open-vm-toolsUpgrade open-vm-tools-containerinfoUpgrade open-vm-tools-desktopUpgrade open-vm-tools-sdmpUpgrade open-vm-tools-salt-minionUpgrade libvmtools0 | Dec 5, 2025 | Oct 10, 2025 |
| Ubuntu | — | Upgrade open-vm-tools (Ubuntu Pro)Upgrade open-vm-tools | Sep 30, 2025 | Sep 29, 2025 |
| Vmware Aria Operations | — | Upgrade VMware Aria Operations to the latest version | Oct 1, 2025 | Sep 29, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Sep 29, 2025 |
| Vmware Vmware Tools | — | Update VMware Tools to the latest version | Sep 30, 2025 | Sep 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub