Local Privilege Escalation in Vagrant VMware Fusion by HashiCorp

CVE-2017-16873

Summary

The vulnerability exists in versions 4.0.25 to 5.0.4 of Vagrant VMware Fusion, where an unsanitized PATH in the suid binary can be exploited, potentially allowing attackers to elevate their privileges to that of the root user. This exploitation poses significant security risks, enabling unauthorized access and control over the affected systems.

References