VMware Avi Load Balancer contains a local privilege escalation vulnerability (CVE-2026-47868) that allows a user with local access to escalate privileges to root level. The affected versions include 22.1.1 through 22.1.7, 30.1.1 through 30.2.6, 31.1.1 through 31.2.2, and 32.1.1. Fixes have been released in versions 30.2.7, 31.2.2-2p3, and 32.1.2 respectively. The vulnerability is rated high severity with a CVSS 3.1 score of 7.8, indicating high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported at this time.

Successful exploitation allows a local attacker to escalate privileges and execute arbitrary code as root, potentially compromising the entire system. This impacts confidentiality, integrity, and availability of the affected system.

Upgrading to the fixed versions is the recommended remediation: upgrade to 30.2.7 or later for the 30.x branch, 31.2.2-2p3 or later for the 31.x branch, and 32.1.2 or later for the 32.x branch. Patch status is confirmed by the version fixes stated in the description. No vendor advisory content is provided to indicate alternative mitigations or no-action status.