← Database

CVE-2025-41244

HIGH CVSS: 7.8 Published: 2025-09-29 Modified: 2026-06-17

Description

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

Affected Platforms

Microsoft WindowsVmware Cloud FoundationVmware Aria OperationsVmware Telco Cloud PlatformLinux Linux KernelVmware Telco Cloud InfrastructureDebian Debian LinuxVmware ToolsVmware Open Vm ToolsVmware Cloud Foundation Operations

Weakness Type

CWE-267

References