Hacking PSA: Update VMware NOW! - Authentication Bypass Vulnerability in "VMware Windows Tools"

[SylverReZ]

PSA: Update VMware NOW! - Authentication Bypass Vulnerability in "VMware Windows Tools" ​

An access control vulnerability was identified as (CVE-2025-22230) at a recorded score of 7.8, which allows a remote attacker with little to no experience to get access to a susceptible VM (virtual machine). This applies to VMware Tools for Windows, an extensions package meant to handle network and display drivers, drag-and-drop functionality for transferring files to a guest VM, and much more. The vulnerability was discovered by security researcher, Sergey Bliznyuk, who was sanctioned by the United States government for supplying hacking tools.

It is strongly advised to update VMware Workstation or other VMware software as this is mandatory.

Sources:

BleepingComputer