# CVE-2025-41244: open-vm-tools: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor w...

CVE-2025-41244 is fixed in 12 products on 1 platform, first by open-vm-tools 2:11.3.0-2ubuntu0~ubuntu20.04.8+esm1, released September 28, 2025. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on October 30, 2025. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/cve/CVE-2025-41244
- Priority: Patch now
- CVSS: 7.8 (high)
- EPSS: 0.1584
- CISA KEV: listed Oct 30, 2025, federal due date Nov 20, 2025
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 28, 2025

## Description

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | open-vm-tools Debian 11.6 (bullseye) | 2:11.2.5-2+deb11u5 | [DLA-4316-1](https://patchblox.com/security/data/fix/linux/dla-4316-1.md) | Sep 30, 2025 |
| Linux | open-vm-tools Debian 12.15 (bookworm) | 2:12.2.0-1+deb12u4 | [DEBIAN-CVE-2025-41244](https://patchblox.com/security/data/fix/linux/debian-cve-2025-41244.md) | Sep 29, 2025 |
| Linux | open-vm-tools Debian 13.5 (trixie) | 2:12.5.0-2+deb13u1 | [DEBIAN-CVE-2025-41244](https://patchblox.com/security/data/fix/linux/debian-cve-2025-41244.md) | Sep 29, 2025 |
| Linux | open-vm-tools Debian 14 | 2:13.0.5-1 | [DEBIAN-CVE-2025-41244](https://patchblox.com/security/data/fix/linux/debian-cve-2025-41244.md) | Sep 29, 2025 |
| Linux | open-vm-tools RHEL 10 | 12.5.0-1.el10_0.1 | [RHSA-2025:17429](https://patchblox.com/security/data/fix/linux/rhsa-2025-17429.md) | Sep 29, 2025 |
| Linux | open-vm-tools RHEL 8 | 0:12.3.5-2.el8_10.1 | [RHSA-2025:17509](https://patchblox.com/security/data/fix/linux/rhsa-2025-17509.md) | Oct 7, 2025 |
| Linux | open-vm-tools RHEL 9 | 0:12.5.0-1.el9_6.2 | [RHSA-2025:17428](https://patchblox.com/security/data/fix/linux/rhsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools Ubuntu 20.04 LTS (focal) | 2:11.3.0-2ubuntu0~ubuntu20.04.8+esm1 | [open-vm-tools 2:11.3.0-2ubuntu0~ubuntu20.04.8+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-open-vm-tools-2-11.3.0-2ubuntu0-ubuntu20.04.8-esm1.md) | Sep 28, 2025 |
| Linux | open-vm-tools Ubuntu 22.04.1 LTS (jammy) | 2:12.3.5-3~ubuntu0.22.04.3 | [open-vm-tools 2:12.3.5-3~ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-open-vm-tools-2-12.3.5-3-ubuntu0.22.04.3.md) | Sep 28, 2025 |
| Linux | open-vm-tools Ubuntu 24.04.5 LTS (noble) | 2:12.5.0-1~ubuntu0.24.04.2 | [open-vm-tools 2:12.5.0-1~ubuntu0.24.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-open-vm-tools-2-12.5.0-1-ubuntu0.24.04.2.md) | Sep 28, 2025 |
| Linux | open-vm-tools Ubuntu 25.04 (plucky) | 2:12.5.0-1ubuntu0.2 | [open-vm-tools 2:12.5.0-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-open-vm-tools-2-12.5.0-1ubuntu0.2.md) | Sep 29, 2025 |
| Linux | open-vm-tools almalinux 10 | 12.5.0-1.el10_0.1 | [ALSA-2025:17429](https://patchblox.com/security/data/fix/linux/alsa-2025-17429.md) | Oct 7, 2025 |
| Linux | open-vm-tools almalinux 8 | 12.3.5-2.el8_10.1 | [ALSA-2025:17509](https://patchblox.com/security/data/fix/linux/alsa-2025-17509.md) | Oct 7, 2025 |
| Linux | open-vm-tools almalinux 9 | 12.5.0-1.el9_6.2 | [ALSA-2025:17428](https://patchblox.com/security/data/fix/linux/alsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools amzn 2023 | 12.3.0-1.amzn2023.0.5 | [ALAS2023-2025-1226](https://patchblox.com/security/data/fix/linux/alas2023-2025-1226.md) | Oct 14, 2025 |
| Linux | open-vm-tools ol 10 | 0:12.5.0-1.0.1.el10_0.1 | [ELSA-2025-17429](https://patchblox.com/security/data/fix/linux/elsa-2025-17429.md) | Oct 7, 2025 |
| Linux | open-vm-tools ol 8 | 0:12.3.5-2.0.1.el8_10.1 | [ELSA-2025-17509](https://patchblox.com/security/data/fix/linux/elsa-2025-17509.md) | Oct 7, 2025 |
| Linux | open-vm-tools ol 9 | 0:12.5.0-1.0.1.el9_6.2 | [ELSA-2025-17428](https://patchblox.com/security/data/fix/linux/elsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools opensuse-leap 15.6 | 13.0.5-150600.3.21.1 | [SUSE-SU-2025:03535-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03535-1.md) | Oct 10, 2025 |
| Linux | open-vm-tools opensuse-leap 16.0 | 13.0.5-160000.1.1 | [OPENSUSE-SU-2026:20067-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20067-1.md) | Jan 20, 2026 |
| Linux | open-vm-tools rocky 10 | 0:12.5.0-1.el10_0.1 | [RLSA-2025:17429](https://patchblox.com/security/data/fix/linux/rlsa-2025-17429.md) | Oct 8, 2025 |
| Linux | open-vm-tools rocky 8 | 0:12.3.5-2.el8_10.1 | [RLSA-2025:17509](https://patchblox.com/security/data/fix/linux/rlsa-2025-17509.md) | Oct 8, 2025 |
| Linux | open-vm-tools rocky 9 | 0:12.5.0-1.el9_6.2 | [RLSA-2025:17428](https://patchblox.com/security/data/fix/linux/rlsa-2025-17428.md) | Oct 18, 2025 |
| Linux | open-vm-tools sles 15.6 | 13.0.5-150600.3.21.1 | [SUSE-SU-2025:03535-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03535-1.md) | Oct 10, 2025 |
| Linux | open-vm-tools sles 15.7 | 13.0.5-150600.3.21.1 | [SUSE-SU-2025:03535-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03535-1.md) | Oct 10, 2025 |
| Linux | open-vm-tools sles 16.0 | 13.0.5-160000.1.1 | [SUSE-SU-2026:20100-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20100-1.md) | Jan 20, 2026 |
| Linux | open-vm-tools-containerinfo Ubuntu 22.04.1 LTS (jammy) | 2:12.3.5-3~ubuntu0.22.04.3 | [open-vm-tools-containerinfo 2:12.3.5-3~ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-open-vm-tools-containerinfo-2-12.3.5-3-ubuntu0.22.04.3.md) | Sep 28, 2025 |
| Linux | open-vm-tools-containerinfo Ubuntu 24.04.5 LTS (noble) | 2:12.5.0-1~ubuntu0.24.04.2 | [open-vm-tools-containerinfo 2:12.5.0-1~ubuntu0.24.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-open-vm-tools-containerinfo-2-12.5.0-1-ubuntu0.24.04.2.md) | Sep 28, 2025 |
| Linux | open-vm-tools-containerinfo Ubuntu 25.04 (plucky) | 2:12.5.0-1ubuntu0.2 | [open-vm-tools-containerinfo 2:12.5.0-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-open-vm-tools-containerinfo-2-12.5.0-1ubuntu0.2.md) | Sep 29, 2025 |
| Linux | open-vm-tools-debuginfo amzn 2023 | 12.3.0-1.amzn2023.0.5 | [ALAS2023-2025-1226](https://patchblox.com/security/data/fix/linux/alas2023-2025-1226.md) | Oct 14, 2025 |
| Linux | open-vm-tools-debugsource amzn 2023 | 12.3.0-1.amzn2023.0.5 | [ALAS2023-2025-1226](https://patchblox.com/security/data/fix/linux/alas2023-2025-1226.md) | Oct 14, 2025 |
| Linux | open-vm-tools-desktop RHEL 8 | 0:12.3.5-2.el8_10.1 | [RHSA-2025:17509](https://patchblox.com/security/data/fix/linux/rhsa-2025-17509.md) | Oct 7, 2025 |
| Linux | open-vm-tools-desktop RHEL 9 | 0:12.5.0-1.el9_6.2 | [RHSA-2025:17428](https://patchblox.com/security/data/fix/linux/rhsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools-desktop Ubuntu 20.04 LTS (focal) | 2:11.3.0-2ubuntu0~ubuntu20.04.8+esm1 | [open-vm-tools-desktop 2:11.3.0-2ubuntu0~ubuntu20.04.8+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-open-vm-tools-desktop-2-11.3.0-2ubuntu0-ubuntu20.04.8-esm1.md) | Sep 28, 2025 |
| Linux | open-vm-tools-desktop Ubuntu 22.04.1 LTS (jammy) | 2:12.3.5-3~ubuntu0.22.04.3 | [open-vm-tools-desktop 2:12.3.5-3~ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-open-vm-tools-desktop-2-12.3.5-3-ubuntu0.22.04.3.md) | Sep 28, 2025 |
| Linux | open-vm-tools-desktop Ubuntu 24.04.5 LTS (noble) | 2:12.5.0-1~ubuntu0.24.04.2 | [open-vm-tools-desktop 2:12.5.0-1~ubuntu0.24.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-open-vm-tools-desktop-2-12.5.0-1-ubuntu0.24.04.2.md) | Sep 28, 2025 |
| Linux | open-vm-tools-desktop Ubuntu 25.04 (plucky) | 2:12.5.0-1ubuntu0.2 | [open-vm-tools-desktop 2:12.5.0-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-open-vm-tools-desktop-2-12.5.0-1ubuntu0.2.md) | Sep 29, 2025 |
| Linux | open-vm-tools-desktop almalinux 10 | 12.5.0-1.el10_0.1 | [ALSA-2025:17429](https://patchblox.com/security/data/fix/linux/alsa-2025-17429.md) | Oct 7, 2025 |
| Linux | open-vm-tools-desktop almalinux 8 | 12.3.5-2.el8_10.1 | [ALSA-2025:17509](https://patchblox.com/security/data/fix/linux/alsa-2025-17509.md) | Oct 7, 2025 |
| Linux | open-vm-tools-desktop almalinux 9 | 12.5.0-1.el9_6.2 | [ALSA-2025:17428](https://patchblox.com/security/data/fix/linux/alsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools-desktop amzn 2023 | 12.3.0-1.amzn2023.0.5 | [ALAS2023-2025-1226](https://patchblox.com/security/data/fix/linux/alas2023-2025-1226.md) | Oct 14, 2025 |
| Linux | open-vm-tools-desktop ol 10 | 0:12.5.0-1.0.1.el10_0.1 | [ELSA-2025-17429](https://patchblox.com/security/data/fix/linux/elsa-2025-17429.md) | Oct 7, 2025 |
| Linux | open-vm-tools-desktop ol 8 | 0:12.3.5-2.0.1.el8_10.1 | [ELSA-2025-17509](https://patchblox.com/security/data/fix/linux/elsa-2025-17509.md) | Oct 7, 2025 |
| Linux | open-vm-tools-desktop ol 9 | 0:12.5.0-1.0.1.el9_6.2 | [ELSA-2025-17428](https://patchblox.com/security/data/fix/linux/elsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools-desktop-debuginfo amzn 2023 | 12.3.0-1.amzn2023.0.5 | [ALAS2023-2025-1226](https://patchblox.com/security/data/fix/linux/alas2023-2025-1226.md) | Oct 14, 2025 |
| Linux | open-vm-tools-devel amzn 2023 | 12.3.0-1.amzn2023.0.5 | [ALAS2023-2025-1226](https://patchblox.com/security/data/fix/linux/alas2023-2025-1226.md) | Oct 14, 2025 |
| Linux | open-vm-tools-salt-minion RHEL 8 | 0:12.3.5-2.el8_10.1 | [RHSA-2025:17509](https://patchblox.com/security/data/fix/linux/rhsa-2025-17509.md) | Oct 7, 2025 |
| Linux | open-vm-tools-salt-minion RHEL 9 | 0:12.5.0-1.el9_6.2 | [RHSA-2025:17428](https://patchblox.com/security/data/fix/linux/rhsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools-salt-minion Ubuntu 22.04.1 LTS (jammy) | 2:12.3.5-3~ubuntu0.22.04.3 | [open-vm-tools-salt-minion 2:12.3.5-3~ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-open-vm-tools-salt-minion-2-12.3.5-3-ubuntu0.22.04.3.md) | Sep 28, 2025 |
| Linux | open-vm-tools-salt-minion Ubuntu 24.04.5 LTS (noble) | 2:12.5.0-1~ubuntu0.24.04.2 | [open-vm-tools-salt-minion 2:12.5.0-1~ubuntu0.24.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-open-vm-tools-salt-minion-2-12.5.0-1-ubuntu0.24.04.2.md) | Sep 28, 2025 |
| Linux | open-vm-tools-salt-minion Ubuntu 25.04 (plucky) | 2:12.5.0-1ubuntu0.2 | [open-vm-tools-salt-minion 2:12.5.0-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-open-vm-tools-salt-minion-2-12.5.0-1ubuntu0.2.md) | Sep 29, 2025 |
| Linux | open-vm-tools-salt-minion almalinux 10 | 12.5.0-1.el10_0.1 | [ALSA-2025:17429](https://patchblox.com/security/data/fix/linux/alsa-2025-17429.md) | Oct 7, 2025 |
| Linux | open-vm-tools-salt-minion almalinux 8 | 12.3.5-2.el8_10.1 | [ALSA-2025:17509](https://patchblox.com/security/data/fix/linux/alsa-2025-17509.md) | Oct 7, 2025 |
| Linux | open-vm-tools-salt-minion almalinux 9 | 12.5.0-1.el9_6.2 | [ALSA-2025:17428](https://patchblox.com/security/data/fix/linux/alsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools-salt-minion amzn 2023 | 12.3.0-1.amzn2023.0.5 | [ALAS2023-2025-1226](https://patchblox.com/security/data/fix/linux/alas2023-2025-1226.md) | Oct 14, 2025 |
| Linux | open-vm-tools-salt-minion ol 10 | 0:12.5.0-1.0.1.el10_0.1 | [ELSA-2025-17429](https://patchblox.com/security/data/fix/linux/elsa-2025-17429.md) | Oct 7, 2025 |
| Linux | open-vm-tools-salt-minion ol 8 | 0:12.3.5-2.0.1.el8_10.1 | [ELSA-2025-17509](https://patchblox.com/security/data/fix/linux/elsa-2025-17509.md) | Oct 7, 2025 |
| Linux | open-vm-tools-salt-minion ol 9 | 0:12.5.0-1.0.1.el9_6.2 | [ELSA-2025-17428](https://patchblox.com/security/data/fix/linux/elsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools-sdmp RHEL 8 | 0:12.3.5-2.el8_10.1 | [RHSA-2025:17509](https://patchblox.com/security/data/fix/linux/rhsa-2025-17509.md) | Oct 7, 2025 |
| Linux | open-vm-tools-sdmp RHEL 9 | 0:12.5.0-1.el9_6.2 | [RHSA-2025:17428](https://patchblox.com/security/data/fix/linux/rhsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools-sdmp Ubuntu 20.04 LTS (focal) | 2:11.3.0-2ubuntu0~ubuntu20.04.8+esm1 | [open-vm-tools-sdmp 2:11.3.0-2ubuntu0~ubuntu20.04.8+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-open-vm-tools-sdmp-2-11.3.0-2ubuntu0-ubuntu20.04.8-esm1.md) | Sep 28, 2025 |
| Linux | open-vm-tools-sdmp Ubuntu 22.04.1 LTS (jammy) | 2:12.3.5-3~ubuntu0.22.04.3 | [open-vm-tools-sdmp 2:12.3.5-3~ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-open-vm-tools-sdmp-2-12.3.5-3-ubuntu0.22.04.3.md) | Sep 28, 2025 |
| Linux | open-vm-tools-sdmp Ubuntu 24.04.5 LTS (noble) | 2:12.5.0-1~ubuntu0.24.04.2 | [open-vm-tools-sdmp 2:12.5.0-1~ubuntu0.24.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-open-vm-tools-sdmp-2-12.5.0-1-ubuntu0.24.04.2.md) | Sep 28, 2025 |
| Linux | open-vm-tools-sdmp Ubuntu 25.04 (plucky) | 2:12.5.0-1ubuntu0.2 | [open-vm-tools-sdmp 2:12.5.0-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-open-vm-tools-sdmp-2-12.5.0-1ubuntu0.2.md) | Sep 29, 2025 |
| Linux | open-vm-tools-sdmp almalinux 10 | 12.5.0-1.el10_0.1 | [ALSA-2025:17429](https://patchblox.com/security/data/fix/linux/alsa-2025-17429.md) | Oct 7, 2025 |
| Linux | open-vm-tools-sdmp almalinux 8 | 12.3.5-2.el8_10.1 | [ALSA-2025:17509](https://patchblox.com/security/data/fix/linux/alsa-2025-17509.md) | Oct 7, 2025 |
| Linux | open-vm-tools-sdmp almalinux 9 | 12.5.0-1.el9_6.2 | [ALSA-2025:17428](https://patchblox.com/security/data/fix/linux/alsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools-sdmp amzn 2023 | 12.3.0-1.amzn2023.0.5 | [ALAS2023-2025-1226](https://patchblox.com/security/data/fix/linux/alas2023-2025-1226.md) | Oct 14, 2025 |
| Linux | open-vm-tools-sdmp ol 10 | 0:12.5.0-1.0.1.el10_0.1 | [ELSA-2025-17429](https://patchblox.com/security/data/fix/linux/elsa-2025-17429.md) | Oct 7, 2025 |
| Linux | open-vm-tools-sdmp ol 8 | 0:12.3.5-2.0.1.el8_10.1 | [ELSA-2025-17509](https://patchblox.com/security/data/fix/linux/elsa-2025-17509.md) | Oct 7, 2025 |
| Linux | open-vm-tools-sdmp ol 9 | 0:12.5.0-1.0.1.el9_6.2 | [ELSA-2025-17428](https://patchblox.com/security/data/fix/linux/elsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools-sdmp-debuginfo amzn 2023 | 12.3.0-1.amzn2023.0.5 | [ALAS2023-2025-1226](https://patchblox.com/security/data/fix/linux/alas2023-2025-1226.md) | Oct 14, 2025 |
| Linux | open-vm-tools-test RHEL 9 | 0:12.5.0-1.el9_6.2 | [RHSA-2025:17428](https://patchblox.com/security/data/fix/linux/rhsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools-test almalinux 10 | 12.5.0-1.el10_0.1 | [ALSA-2025:17429](https://patchblox.com/security/data/fix/linux/alsa-2025-17429.md) | Oct 7, 2025 |
| Linux | open-vm-tools-test almalinux 9 | 12.5.0-1.el9_6.2 | [ALSA-2025:17428](https://patchblox.com/security/data/fix/linux/alsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools-test amzn 2023 | 12.3.0-1.amzn2023.0.5 | [ALAS2023-2025-1226](https://patchblox.com/security/data/fix/linux/alas2023-2025-1226.md) | Oct 14, 2025 |
| Linux | open-vm-tools-test ol 10 | 0:12.5.0-1.0.1.el10_0.1 | [ELSA-2025-17429](https://patchblox.com/security/data/fix/linux/elsa-2025-17429.md) | Oct 7, 2025 |
| Linux | open-vm-tools-test ol 9 | 0:12.5.0-1.0.1.el9_6.2 | [ELSA-2025-17428](https://patchblox.com/security/data/fix/linux/elsa-2025-17428.md) | Oct 7, 2025 |
| Linux | open-vm-tools-test-debuginfo amzn 2023 | 12.3.0-1.amzn2023.0.5 | [ALAS2023-2025-1226](https://patchblox.com/security/data/fix/linux/alas2023-2025-1226.md) | Oct 14, 2025 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.