CVE-2009-1143: VMware Open-Vm-Tools

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).

Affected products

• VMware Open-Vm-Tools: version 2009.03.18-154848 only

Published 2022-11-23. Last modified 2026-06-16.