CVE-2017-16777

CVE-2017-16777 describes a local privilege escalation vulnerability affecting HashiCorp Vagrant VMware Fusion plugin version 5.0.3. If VMware Fusion is not installed, a local attacker can create a fake application directory to exploit a suid sudo helper, gaining root privileges. This vulnerability carries a high CVSS score of 7.8, indicating high impact on confidentiality, integrity, and availability with low attack complexity. While not listed on the KEV catalog, public exploit code is available via ExploitDB, though there is no evidence of active exploitation or significant community discussion.