CVE-2026-59347

Summary

A stack-based buffer overflow in VMware Workstation and Fusion's HGFS component allows a local administrator within a VM to execute arbitrary code as the VMX host process, potentially leading to full host compromise.

Exploitability

Exploitation requires local administrative access within a guest VM, making it moderately difficult but possible for attackers who have already gained VM access, with no additional user interaction required once the precondition is met.

Blast radius

If exploited, this vulnerability could allow attackers to escape the VM boundary and gain full control of the host system, potentially affecting all VMs running on that host.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to VMware Workstation 26H1u1 or VMware Fusion 26H1u1 immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.