Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-41244

73
FAUCET Score

CVE-2025-41244 is a local privilege escalation vulnerability affecting VMware Aria Operations and VMware Tools on Linux, Debian, and Microsoft systems. A non-administrative local actor can exploit this flaw to gain root privileges on a VM where VMware Tools is installed and managed by Aria Operations with SDMP enabled. This vulnerability has a CVSS score of 7.8 (High) due to its low attack complexity and high impact on confidentiality, integrity, and availability. It is actively exploited in the wild, as confirmed by its inclusion in CISA's KEV catalog, and has garnered significant community discussion and media coverage, despite no public exploit code being available.

Impacted Technologies

VendorProductVersion(s)CPE
>= 8.0, < 8.18.5CPE matchmatch criteria
cpe:2.3:a:vmware:aria_operations:*:*:*:*:*:*:*:*
>= 4.0, <= 5.2.2CPE matchmatch criteria
cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
9.0CPE matchmatch criteria
cpe:2.3:a:vmware:cloud_foundation_operations:9.0:*:*:*:*:*:*:*
>= 11.2.0, < 12.5.4CPE matchmatch criteria
cpe:2.3:a:vmware:open_vm_tools:*:*:*:*:*:*:*:*
13.0.0CPE matchmatch criteria
cpe:2.3:a:vmware:open_vm_tools:13.0.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
7.88%
Probability of exploitation in next 30 days
EPSS Percentile
94.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
Added to KEV · Oct 30, 2025
This CVE's current EPSS score of 0.0788 is in the 99th percentile among its peer group of 16,994 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (15)

feathersjspatch availablevia llm_extracted
Fixed in: VMware Aria Automation 8.18.5, VMware Tools 13.0.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: open-vm-tools-0:12.1.5-1.el9_2.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: open-vm-tools-0:12.5.0-1.el10_0.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: open-vm-tools-0:12.3.5-2.el8_10.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: open-vm-tools-0:11.2.0-2.el8_4.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: open-vm-tools-0:11.2.0-2.el8_4.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: open-vm-tools-0:11.3.5-1.el8_6.6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: open-vm-tools-0:11.3.5-1.el9_0.6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: open-vm-tools-0:11.3.5-1.el8_6.6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: open-vm-tools-0:12.1.5-2.el8_8.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: open-vm-tools-0:12.1.5-2.el8_8.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: open-vm-tools-0:12.5.0-1.el9_6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: open-vm-tools-0:12.3.5-2.el9_4.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: open-vm-tools-0:11.3.5-1.el8_6.6
View patch
sophospatch availablevia llm_extracted
Fixed in: VMware Aria Automation 8.18.5, VMware Tools 13.0.5
View patch

Vendor Advisories (3)

sophosllm-sophos-8f9e59b0a681a5eaHIGH

Multiple vulnerabilities in VMware Aria Operations and VMware Tools

Oct 14, 2025
redhatCVE-2025-41244Important

open-vm-tools: Local privilege escalation in open-vm-tools

Sep 29, 2025
feathersjsllm-feathersjs-80c01917fd446035HIGH

Multiple vulnerabilities in VMware Aria Operations and VMware Tools

References

blog.nviso.eu / 2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244
ExploitThird Party Advisory
support.broadcom.com / web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149
Vendor Advisory
cisa.gov / known-exploited-vulnerabilities-catalog
US Government Resource
lists.debian.org / debian-lts-announce/2025/10/msg00000.html
Mailing ListThird Party Advisory
openwall.com / lists/oss-security/2025/09/29/10
Mailing ListThird Party Advisory
support.broadcom.com / group/ecx/support-content-view/-/support-content/Security%20Advisories/VMSA-2025-0015--VMware-Aria-Operations-and-VMware-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41244-CVE-2025-41245--CVE-2025-41246-/36149
Permissions Required