Open VM Tools vulnerabilities

2 known vulnerabilities in Open VM Tools from VMware. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Exploited

  CVE-2025-41244Sep 29, 2025VMwareEPSS 16.4%

  VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploi

• 7.5 High severity

  VMware Tools: Authentication Bypass by Capture-replay

  CVE-2023-20900Aug 31, 2023VMware ToolsEPSS 1.47%

  A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target