Privilege Escalation Vulnerability in VMware Aria Operations

CVE-2026-22721

What is CVE-2026-22721?

VMware Aria Operations is affected by a privilege escalation vulnerability that allows a threat actor with existing privileges in vCenter to gain unauthorized administrative access. This exploitation can lead to heightened permissions within the application, potentially allowing malicious activities. To mitigate this risk, users are advised to apply the patches provided in the Response Matrix documented in VMSA-2026-0001 and review the release notes for resolution details. Regularly updating your systems is crucial in maintaining security against such vulnerabilities.

References