High severity7.8NVD Advisory· Published Mar 29, 2018· Updated Jun 17, 2026
CVE-2017-16873
CVE-2017-16873
Description
It is possible to exploit an unsanitized PATH in the suid binary that ships with vagrant-vmware-fusion 4.0.25 through 5.0.4 in order to escalate to root privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3>=4.0.25,<=5.0.4+ 2 more
- (no CPE)range: >=4.0.25,<=5.0.4
- cpe:2.3:a:hashicorp:vagrant_vmware_fusion:*:*:*:*:*:*:*:*range: >=4.0.25,<=5.0.4
- (no CPE)range: 4.0.25 - 5.0.4
Patches
Vulnerability mechanics
References
1- m4.rkw.io/blog/cve201716873-hashicorp-vagrantvmwarefusion-v4025504-local-root.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.