VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-open-vm-toolsalma-upgrade-open-vm-tools-desktopalma-upgrade-open-vm-tools-salt-minionalma-upgrade-open-vm-tools-sdmpalma-upgrade-open-vm-tools-test | Oct 10, 2025 | Oct 7, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-open-vm-toolsamazon-linux-ami-2-upgrade-open-vm-tools-debuginfoamazon-linux-ami-2-upgrade-open-vm-tools-desktopamazon-linux-ami-2-upgrade-open-vm-tools-develamazon-linux-ami-2-upgrade-open-vm-tools-salt-minionamazon-linux-ami-2-upgrade-open-vm-tools-sdmpamazon-linux-ami-2-upgrade-open-vm-tools-test | May 20, 2026 | May 20, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-open-vm-toolsamazon-linux-2023-upgrade-open-vm-tools-debuginfoamazon-linux-2023-upgrade-open-vm-tools-debugsourceamazon-linux-2023-upgrade-open-vm-tools-desktopamazon-linux-2023-upgrade-open-vm-tools-desktop-debuginfoamazon-linux-2023-upgrade-open-vm-tools-develamazon-linux-2023-upgrade-open-vm-tools-salt-minionamazon-linux-2023-upgrade-open-vm-tools-sdmpamazon-linux-2023-upgrade-open-vm-tools-sdmp-debuginfoamazon-linux-2023-upgrade-open-vm-tools-testamazon-linux-2023-upgrade-open-vm-tools-test-debuginfo | Oct 16, 2025 | Sep 29, 2025 | |
| Debian | debian-upgrade-open-vm-tools | Oct 2, 2025 | Oct 2, 2025 | |
| Dell Powerstore Dsa2026115 | dell-powerstoreos-upgrade-latest | Feb 25, 2026 | Feb 24, 2026 | |
| Oracle_linux | — | oracle-linux-upgrade-open-vm-toolsoracle-linux-upgrade-open-vm-tools-desktoporacle-linux-upgrade-open-vm-tools-salt-minionoracle-linux-upgrade-open-vm-tools-sdmporacle-linux-upgrade-open-vm-tools-test | Oct 9, 2025 | Sep 29, 2025 |
| Redhat_linux | redhat-upgrade-open-vm-toolsredhat-upgrade-open-vm-tools-debuginforedhat-upgrade-open-vm-tools-debugsourceredhat-upgrade-open-vm-tools-desktopredhat-upgrade-open-vm-tools-desktop-debuginforedhat-upgrade-open-vm-tools-salt-minionredhat-upgrade-open-vm-tools-sdmpredhat-upgrade-open-vm-tools-sdmp-debuginforedhat-upgrade-open-vm-tools-testredhat-upgrade-open-vm-tools-test-debuginfo | Oct 8, 2025 | Sep 29, 2025 | |
| Rocky_linux | rocky-upgrade-open-vm-toolsrocky-upgrade-open-vm-tools-debuginforocky-upgrade-open-vm-tools-debugsourcerocky-upgrade-open-vm-tools-desktoprocky-upgrade-open-vm-tools-desktop-debuginforocky-upgrade-open-vm-tools-salt-minionrocky-upgrade-open-vm-tools-sdmprocky-upgrade-open-vm-tools-sdmp-debuginforocky-upgrade-open-vm-tools-testrocky-upgrade-open-vm-tools-test-debuginfo | Feb 5, 2026 | Oct 8, 2025 | |
| Suse | — | suse-upgrade-libvmtools-develsuse-upgrade-libvmtools0suse-upgrade-open-vm-toolssuse-upgrade-open-vm-tools-containerinfosuse-upgrade-open-vm-tools-desktopsuse-upgrade-open-vm-tools-salt-minionsuse-upgrade-open-vm-tools-sdmp | Dec 5, 2025 | Oct 10, 2025 |
| Ubuntu | ubuntu-pro-upgrade-open-vm-toolsubuntu-upgrade-open-vm-tools | Sep 30, 2025 | Sep 29, 2025 | |
| Vmware Aria Operations | vmware-aria-operations-upgrade-latest | Oct 1, 2025 | Sep 29, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Oct 8, 2025 | Sep 29, 2025 | |
| Vmware Vmware Tools | vmware-tools-upgrade-latest | Sep 30, 2025 | Sep 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub