---
id: "CVE-2024-38813"
kind: "vulnerability"
aliases: ["CVE-2024-38813"]
title: "The vCenter Server contains a privilege escalation vulnerability"
severity: "critical"
cvss: 9.8
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "VMware vCenter Server", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "vmware cloud foundation", "fixed": ["5.2"], "affected": ">= 4.0, < 5.2", "ecosystem": "vendor"}, {"name": "vmware vcenter server", "fixed": [], "affected": "= 7.0", "ecosystem": "vendor"}, {"name": "vmware vcenter server", "fixed": [], "affected": "= 8.0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "self-hosted", "vcenter", "vendor", "vmware"]
not_affected_if: ["managed-hosting"]
published_at: "2024-09-17T18:15:04+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38813", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38813", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# The vCenter Server contains a privilege escalation vulnerability

VMware vCenter Server has an improper check for dropped privileges that lets a network attacker send a crafted packet and gain root on the vCenter Server. CISA lists it as actively exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:VMware vCenter Server affected ? fixed ?
- vendor:vmware cloud foundation affected >= 4.0, < 5.2 fixed 5.2
- vendor:vmware vcenter server affected = 7.0 fixed ?
- vendor:vmware vcenter server affected = 8.0 fixed ?

## Fix

Apply the vendor mitigation or patch per VMware's advisory for CVE-2024-38813; if no mitigation is available, discontinue use of the product per CISA's required action.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38813
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-38813

## From the sources

VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet.

CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_