Medium USN-7508-1 1 CVE

open-vm-tools vulnerability

Published May 13, 2025 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Open VM Tools incorrectly handled certain file
operations. An attacker in a guest could use this issue to perform insecure
file operations and possibly elevate privileges in the guest.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	open-vm-tools	2:11.3.0-2ubuntu0~ubuntu20.04.8
Ubuntu · 22.04 LTS 22.04:LTS	open-vm-tools	2:12.3.5-3~ubuntu0.22.04.2
Ubuntu · 24.04 LTS 24.04:LTS	open-vm-tools	2:12.4.5-1~ubuntu0.24.04.2

Vulnerabilities 1

Medium 6.1

CVE-2025-22247

Insecure file handling vulnerability

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.

open-vm-tools open-vm-tools open-vm-tools Debian Ubuntu Azure Linux

May 12, 2025

References

report
https://ubuntu.com/security/CVE-2025-22247