CVE-2025-41229: VMware Cloud Foundation

High severity, CVSS 8.2. EPSS: 0.7% chance of exploitation in the next 30 days.

VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to access certain internal services.

Affected products

• VMware Cloud Foundation: from 5, before 5.2.1.2 (fixed in 5.2.1.2); from 4.5, before 4.6 (fixed in 4.6)

Published 2025-05-20. Last modified 2026-06-17.