Skip to content
OpenAdvisories
High 1 exploited CVE ALSA-2025:17428 1 CVE

Important: open-vm-tools security update

Published Oct 7, 2025 · Updated Oct 29, 2026

Summary

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.

Security Fix(es):

* open-vm-tools: Local privilege escalation in open-vm-tools (CVE-2025-41244)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 5

ReleasePackageFixed in
AlmaLinux · 9 open-vm-tools 12.5.0-1.el9_6.2
AlmaLinux · 9 open-vm-tools-desktop 12.5.0-1.el9_6.2
AlmaLinux · 9 open-vm-tools-salt-minion 12.5.0-1.el9_6.2
AlmaLinux · 9 open-vm-tools-sdmp 12.5.0-1.el9_6.2
AlmaLinux · 9 open-vm-tools-test 12.5.0-1.el9_6.2

Vulnerabilities 1

  • High 7.8
    CVE-2025-41244 Exploited Public exploit EPSS 16%

    VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

    KEV Oct 30, 2025

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-41244
  • report
    https://bugzilla.redhat.com/2397752
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-17428.html