Vagrant

vagrant

Vendor: Hashicorp • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-5834 1Hashicorp 1Vagrant Jun 17, 2026 Oct 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.
CVE-2022-42717 1Hashicorp 1Vagrant Jun 17, 2026 Oct 11, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on t...Show more An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root.Show less
CVE-2017-16777 1Hashicorp 1Vagrant May 13, 2026 Nov 16, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to esc...Show more If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root.Show less
CVE-2017-16001 1Hashicorp 1Vagrant May 13, 2026 Nov 6, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges.