VMware Aria Operations and VMware Tools have a local privilege escalation vulnerability (CVE-2025-41244) that allows a local user with non-administrative privileges on a VM to escalate to root privileges. This requires VMware Tools to be installed and managed by Aria Operations with SDMP enabled on the VM.