CVE-2025-41225
High
Description
The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script action may exploit this issue to run arbitrary commands on the vCenter Server.
SeverityHigh
CVSS8.8
Exploit probability—
Product
vCenter Server
PublishedMay 20, 2025
First seenMay 20, 2025
Weakness typeCWE-78OS command injection
How to fix
Update
- VMware vCenter Server8.0 U3e, 7.0 U3v or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vCenter Server | 8.0 ≤ v < 8.0 U3e, 7.0 ≤ v < 7.0 U3v | 8.0 U3e, 7.0 U3v |
| VMware Cloud Foundation | 5.x, 4.5.x | — |
| VMware Telco Cloud Platform | 5.x, 4.x, 3.x, 2.x | — |
| VMware Telco Cloud Infrastructure | 3.x, 2.x | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.