Skip to content
Sign in
7.6 High

CVE-2025-41246 VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access…

Description

VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs. Successful exploitation requires knowledge of credentials of the targeted VMs and vCenter or ESX.

Affected products and versions

Product Affected versions Fixed in
Tools 13 13.x.x.x → < 13.0.5.0 13.0.5.0
Tools 12 12.x.x → < 12.5.4 12.5.4
Tools 11.x.x No fix stated

Other CVEs of Tools

The 2 CVEs of Tools →
CVE-2025-41239 VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage… 7.1 High
Track this CVE