CVE-2025-41230: VMware Cloud Foundation

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

VMware Cloud Foundation contains an information disclosure vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to gain access to sensitive information.

Affected products

• VMware Cloud Foundation: from 5, before 5.2.1.2 (fixed in 5.2.1.2); from 4.5, before 4.6 (fixed in 4.6)

Published 2025-05-20. Last modified 2026-06-17.