CVE-2017-16839: Hashicorp Vagrant VMware Fusion

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Hashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware Fusion is not installed.

Affected products

• Hashicorp Vagrant VMware Fusion: version 5.0.4 only

Published 2018-03-29. Last modified 2026-06-17.