CVE-2025-22247: VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to…

medium6.1CVSS 3.1

AVLACLPRLUINSUCLIHAN

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	open-vm-tools	< open-vm-tools 2:12.2.0-1+deb12u3 (bookworm)	open-vm-tools 2:12.2.0-1+deb12u3 (bookworm)
msrc	azl3_open-vm-tools_12.3.5-2_on_azure_linux_3.0	—	—
msrc	cbl2_open-vm-tools_11.3.0-4_on_cbl_mariner_2.0	—	—
vmware	open-vm-tools	>= 0 < 2:11.2.5-2+deb11u4	2:11.2.5-2+deb11u4
vmware	open-vm-tools	>= 0 < 2:12.2.0-1+deb12u3	2:12.2.0-1+deb12u3
vmware	open-vm-tools	>= 0 < 2:12.5.0-2	2:12.5.0-2
vmware	open-vm-tools	>= 0 < 2:12.5.0-2	2:12.5.0-2

CVSS provenance

nvdv3.16.1MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

osv6.1MEDIUM