VMware Workstation and Fusion NAT Vulnerability Allowing Interception of Network Connections Between Guest VMs

A logic flaw has been identified in VMware Workstation and Fusion that affects the management of network packets. This vulnerability allows a malicious actor with administrative privileges on a guest VM to interrupt or intercept network connections of other guest VMs. The issue is present in VMware Workstation versions 17.x and 25H2, as well as VMware Fusion versions 13.x and 25H2.

Impact

Exploitation of this vulnerability could disrupt or intercept network connections between guest VMs, potentially leading to unauthorized access or manipulation of network traffic.

Remediation

Users can upgrade to VMware Workstation or Fusion Version 25H2U1 to address this vulnerability.