CVE-2025-41246

VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs. Successful exploitation requires knowledge of credentials of the targeted VMs and vCenter or ESX.

CVSS v3 7.6 HIGH

7.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.0 / Impact : 6.0

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149

Configurations

No configuration.

History

09 Oct 2026, 09:10

Type	Values Removed	Values Added
Summary		(es) VMware Tools para Windows contiene una vulnerabilidad de autorización indebida debido a la forma en que maneja los controles de acceso de usuario. Un actor malicioso con privilegios no administrativos en una VM invitada, que ya está autenticado a través de vCenter o ESX, puede explotar este problema para acceder a otras VM invitadas. La explotación exitosa requiere conocimiento de las credenciales de las VM objetivo y de vCenter o ESX.

Information

Published : 2025-09-29 16:15

Updated : 2026-10-09 09:10

NVD link : CVE-2025-41246

Mitre link : CVE-2025-41246

CVE.ORG link : CVE-2025-41246

JSON object : View

Products Affected

No product.

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2025-41246", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-41246", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-09-30T03:55:12.009280Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.6, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.0}]}, "affected": [{"source": "security@vmware.com", "affectedData": [{"vendor": "VMware", "product": "Tools", "versions": [{"status": "affected", "version": "13.x.x.x", "lessThan": "13.0.5.0", "versionType": "custom"}, {"status": "affected", "version": "12.x.x", "lessThan": "12.5.4", "versionType": "custom"}, {"status": "affected", "version": "11.x.x"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}]}], "published": "2025-09-29T16:15:37.890", "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149", "source": "security@vmware.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@vmware.com", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "VMware Tools for Windows contains an improper authorisation\u00a0vulnerability due to the way it handles user access controls.\u00a0A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs. Successful exploitation requires knowledge of credentials of the targeted VMs and vCenter or ESX."}, {"lang": "es", "value": "VMware Tools para Windows contiene una vulnerabilidad de autorizaci\u00f3n indebida debido a la forma en que maneja los controles de acceso de usuario. Un actor malicioso con privilegios no administrativos en una VM invitada, que ya est\u00e1 autenticado a trav\u00e9s de vCenter o ESX, puede explotar este problema para acceder a otras VM invitadas. La explotaci\u00f3n exitosa requiere conocimiento de las credenciales de las VM objetivo y de vCenter o ESX."}], "lastModified": "2026-10-09T09:10:00.213", "sourceIdentifier": "security@vmware.com"}