Local Privilege Escalation in VMware Aria Operations and VMware Tools

CVE-2025-41244

What is CVE-2025-41244?

VMware Aria Operations and VMware Tools are affected by a local privilege escalation vulnerability that allows a malicious local user with non-administrative access to exploit the flaw. If the user has access to a virtual machine (VM) with VMware Tools installed, managed via Aria Operations with SDMP enabled, they can potentially escalate their privileges to root on that same VM. This scenario poses significant security risks, particularly in environments where sensitive data or critical applications are managed.

References