VMware Avi Load Balancer Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in VMware Avi Load Balancer. This issue allows a malicious user with local access to escalate privileges and execute code as the root user. The vulnerability is present in versions 31.1.1 through 31.2.2, 30.1.1 through 30.2.6, and 22.1.1 through 22.1.7, with version 32.1.1 being the only affected release in the 32.x series.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to execute code with root privileges.

Remediation

Users can upgrade to VMware Avi Load Balancer version 32.1.2, 31.2.2-2p3, or 30.2.7. For version 22.1.x, an upgrade to at least 30.2.7 is required.