Skip to content
OpenAdvisories
High · 7.1 CVE-2026-47870 EUVD-2026-45365GHSA-x69w-rh5r-3wgj

VMware Avi Load Balancer Privilege Escalation Vulnerability

Published Jul 18, 2026 · Updated Jul 24, 2026 · Assigned by vmware

Description

VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated user with network access may be able to execute remote code.

Affected versions:
32.1.1 (fixed in 32.1.2)
31.1.1 through 31.2.2 (fixed in 31.2.2-2p3)
30.1.1 through 30.2.6 (fixed in 30.2.7)
22.1.1 through 22.1.7 (fixed in 30.2.7)

Affected products

VendorProductAffectedFixed
VMware Avi Load Balancer 32.1.1, 31.1.1 – ≤ 31.2.2, 30.1.1 – ≤ 30.2.6, 22.1.1 – ≤ 22.1.7 —

References