Local Privilege Escalation in HashiCorp Vagrant VMware Fusion Plugin

CVE-2017-16001

Summary

In the HashiCorp Vagrant VMware Fusion plugin, version 5.0.1, a local attacker can exploit the plugin's update process. By leveraging this flaw, an attacker or malicious software can gain unauthorized root access, allowing for complete control over the affected system.

References