Denial-of-Service Vulnerability in VMware ESXi Affecting Virtual Machines

CVE-2025-41226

What is CVE-2025-41226?

VMware ESXi contains a vulnerability that allows a malicious actor with guest operation privileges to exploit a flaw during guest operations. This can lead to a denial-of-service condition for virtual machines that have VMware Tools running and guest operations enabled. The attacker must be authenticated through either vCenter Server or ESXi to trigger this vulnerability, potentially impacting the performance and availability of affected VMs.

References