Skip to content
OpenAdvisories
High 1 exploited CVE RHSA-2025:17452 1 CVE

Red Hat Security Advisory: open-vm-tools security update

Published Oct 7, 2025 · Updated Sep 2, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream open-vm-tools 0:11.3.5-1.el9_0.6
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream open-vm-tools-debuginfo 0:11.3.5-1.el9_0.6
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream open-vm-tools-debugsource 0:11.3.5-1.el9_0.6
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream open-vm-tools-desktop 0:11.3.5-1.el9_0.6
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream open-vm-tools-desktop-debuginfo 0:11.3.5-1.el9_0.6
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream open-vm-tools-sdmp 0:11.3.5-1.el9_0.6
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream open-vm-tools-sdmp-debuginfo 0:11.3.5-1.el9_0.6
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream open-vm-tools-test 0:11.3.5-1.el9_0.6
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream open-vm-tools-test-debuginfo 0:11.3.5-1.el9_0.6

Vulnerabilities 1

  • High 7.8
    CVE-2025-41244 Exploited Public exploit EPSS 16%

    VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

    VMware VMware Aria Operations VMware Telco Cloud Platform VMware Cloud Foundation Debian Ubuntu Azure Linux
    KEV Oct 30, 2025

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2397752
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17452.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-41244
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-41244
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-41244
  • article
    https://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/
  • article
    https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog