CVE-2017-15884: Hashicorp Vagrant VMware Fusion

High severity, CVSS 7.0. EPSS: 0.9% chance of exploitation in the next 30 days.

In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges.

Affected products

• Hashicorp Vagrant VMware Fusion: version 5.0.0 only

Published 2017-10-31. Last modified 2026-06-17.