CVE-2017-16512: Hashicorp Vagrant VMware Fusion

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root privileges via a crafted update request when no updates are available.

Affected products

• Hashicorp Vagrant VMware Fusion: from 5.0.2, up to and including 5.0.4

Published 2018-03-29. Last modified 2026-06-17.