CVE-2025-41246— Improper authorisation vulnerability
Quick assessment
Affected
VMware Tools
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
VMware Tools for Windows是美国威睿（VMware）公司的一套基于Windows平台的、VMWare虚拟机自带的增强工具，它是VMware提供的用于增强虚拟显卡和硬盘性能、以及同步虚拟机与主机时钟的驱动程序。 VMware Tools for Windows存在安全漏洞，该漏洞源于用户访问控制处理不当，可能导致已通过vCenter或ESX认证的恶意攻击者访问其他客户虚拟机。
Possible ATT&CK Techniques 2 AI
T1133 · External Remote Services T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-41246
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper authorisation vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs. Successful exploitation requires knowledge of credentials of the targeted VMs and vCenter or ESX.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5
Vulnerability Title
VMware Tools for Windows 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
VMware Tools for Windows是美国威睿（VMware）公司的一套基于Windows平台的、VMWare虚拟机自带的增强工具，它是VMware提供的用于增强虚拟显卡和硬盘性能、以及同步虚拟机与主机时钟的驱动程序。 VMware Tools for Windows存在安全漏洞，该漏洞源于用户访问控制处理不当，可能导致已通过vCenter或ESX认证的恶意攻击者访问其他客户虚拟机。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-41246
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-41246
请登录查看更多情报信息。
Same Patch Batch · VMware · 2025-09-29 · 6 CVEs total
| CVE-2025-41250 | 8.5 HIGH | Header injection vulnerability |
| CVE-2025-41251 | 8.1 HIGH | Weak password recovery vulnerability |
| CVE-2025-41244 | 7.8 HIGH | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabi |
| CVE-2025-41252 | 7.5 HIGH | Username enumeration vulnerability |
| CVE-2025-41245 | 4.9 MEDIUM | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabi |
IV. Related Vulnerabilities
Same vendor: VMware
-
CVE-2026-59347
VMware Workstation and Fusion HGFS stack-based buffer-overfl -
CVE-2026-59346
VMware Workstation and Fusion VMXNET3 integer-overflow vulne -
CVE-2026-59355
Spring Authorization Server: Open Redirect via request_uri p -
CVE-2026-41709
ESX insufficient logging vulnerability -
CVE-2026-41703
Out-of-bounds read vulnerability
Same weakness: CWE-863
-
CVE-2026-108695
MultiVendorX through 5.0.19 Incorrect Authorization via Sett -
CVE-2026-108604
Tabularis through 0.27.0 Read-Only Bypass via MCP run_query -
CVE-2026-108595
Phi 0.3.0 through 0.28.4 Permission Bypass via agent_spawn W -
CVE-2026-108586
1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypass via -
CVE-2026-108550
SkillHub before 0.2.22 Account Takeover via Account Merge Fl
V. Comments for CVE-2025-41246
No comments yet