CVE-2024-10228: Hashicorp Vagrant VMware Utility

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing potential for unauthorized file system writes. This vulnerability, CVE-2024-10228, was fixed in Vagrant VMWare Utility 1.0.23

Affected products

• Hashicorp Vagrant VMware Utility: before 1.0.23 (fixed in 1.0.23)

Published 2024-10-29. Last modified 2026-06-17.