AZL-93039 CVE-2025-41244 affecting package open-vm-tools for versions less than 12.3.5-3

🗓️ 29 Sep 2025 17:15:30Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Local privilege escalation in open-vm-tools below 12.3.5-3 via Aria Operations SDMP to root.

Reporter	Title	Published	Views	Family All 175
GithubExploit	Exploit for CVE-2025-41244	6 Oct 202501:35	–	githubexploit
GithubExploit	Exploit for CVE-2025-41244	30 Sep 202511:40	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by local privilege escalation due to VMware Tools (CVE-2025-41244)	23 Jul 202614:10	–	ibm
Tenable Nessus	Amazon Linux 2023 : open-vm-tools, open-vm-tools-desktop, open-vm-tools-devel (ALAS2023-2025-1226)	15 Oct 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : open-vm-tools, --advisory ALAS2-2025-3036 (ALAS-2025-3036)	15 Oct 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0159: open-vm-tools (ALINUX3-SA-2025:0159)	16 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : open-vm-tools (ALSA-2025:17428)	13 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 10 : open-vm-tools (ALSA-2025:17429)	9 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : open-vm-tools (ALSA-2025:17509)	14 Oct 202500:00	–	nessus
Tenable Nessus	Debian dla-4316 : open-vm-tools - security update	1 Oct 202500:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-41244

30 Aug 2026 05:26Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8

EPSS0.08438

SSVC

open-vm-tools privilege escalation VMware Aria Operations SDMP root escalation