Live › vulnerability › CVE-2023-20867
Go to dashboardVMware Tools has an authentication bypass in its vgauth module that lets host-to-guest operations skip authentication. An attacker who has fully compromised the ESXi host can read or change data inside the guest virtual machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| vmware tools | vendor | >= 10.3.0, < 12.2.5 | 12.2.5 |
| debian linux | vendor | = 10.0 | – |
| debian linux | vendor | = 11.0 | – |
| debian linux | vendor | = 12.0 | – |
| fedoraproject fedora | vendor | = 37 | – |
| fedoraproject fedora | vendor | = 38 | – |
| fedoraproject fedora | vendor | = 39 | – |
| VMware Tools | vendor | – | – |
Unknown from the sources.
Apply the VMware Tools update per vendor instructions; the fixed version is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2023-20867")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.