CVE-2024-38818: VMware Cloud Foundation

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

VMware NSX contains a local privilege escalation vulnerability.  An authenticated malicious actor may exploit this vulnerability to obtain permissions from a separate group role than previously assigned.

Affected products

• VMware Cloud Foundation
• VMware Nsx: from 4.1.0, before 4.2.1 (fixed in 4.2.1)
• VMware Nsx-T: from 3.2.0, before 3.2.4.1 (fixed in 3.2.4.1)

Published 2024-10-09. Last modified 2026-06-17.