Skip to content
OpenAdvisories
High 1 exploited CVE SUSE-RU-2026:20677-1 1 CVE

Recommended update for open-vm-tools

Published Mar 4, 2026 · Updated Mar 23, 2026

Ecosystem: SUSE

Summary

This update for open-vm-tools fixes the following issues:

- update to 13.0.10 based on build 25056151 (boo#1257357):
* There are no new features in the open-vm-tools 13.0.10 release.
* This is primarily a maintenance release that addresses a fix.
* A minor enhancement has been made for Guest OS Customization.
* The DeployPkg plugin has been updated to handle a new cloud-init error code that
signals a recoverable error and allow cloud-init to finish running.

Fixed packages 1

ReleasePackageFixed in
SUSE · SLE Micro 6.1 Linux Micro 6.1 open-vm-tools 13.0.10-slfo.1.1_1.1

Vulnerabilities 1

  • High 7.8
    CVE-2025-41244 Exploited Public exploit EPSS 16%

    VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

    VMware VMware Aria Operations VMware Telco Cloud Platform VMware Cloud Foundation Debian Ubuntu Azure Linux
    KEV Oct 30, 2025

References

  • report
    https://bugzilla.suse.com/1250692
  • report
    https://bugzilla.suse.com/1257357
  • web
    https://www.suse.com/security/cve/CVE-2025-41244