CVE-2017-12579: Hashicorp Vagrant VMware Fusion

High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-root user to obtain a root shell.

Affected products

• Hashicorp Vagrant VMware Fusion: up to and including 4.0.24

Published 2017-10-19. Last modified 2026-06-17.