CVE-2025-41229 VMware Cloud Foundation Directory Traversal Vulnerability
A network attacker can exploit a directory traversal flaw in VMware Cloud Foundation to access internal services via port 443.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-41229?
CVE-2025-41229 is a high-severity path traversal vulnerability in VMware Cloud Foundation, published on 20 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to access certain internal services.
Weakness: CWE-22
Which versions are affected by CVE-2025-41229?
How do I fix CVE-2025-41229?
No fix has been published for CVE-2025-41229 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-41229 being exploited?
There is no known exploitation of CVE-2025-41229 in the wild and no public exploit code.
Sources
Also known as GHSA-6678-8j3c-rghf.