CVE-2017-11741: Hashicorp Vagrant VMware Fusion

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts.

Affected products

• Hashicorp Vagrant VMware Fusion: up to and including 4.0.23

Published 2017-08-08. Last modified 2026-06-17.