CVE-2025-41244
Description
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
Summary dbcve.org
Local privilege escalation vulnerability in VMware Aria Operations and VMware Tools where a non-administrative user on a VM with VMware Tools installed, managed by Aria Operations with SDMP enabled, can escalate privileges to root on the same VM.
Mitigation
Apply VMware security patches when available. Until then, evaluate disabling SDMP in Aria Operations if feasible for your environment, or restrict VM access to trusted administrative personnel only.