EUVD-2026-45364
GHSA-h452-q2fr-5rvh
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Network-reachable management plane (AV:N/AC:L) but requires an elevated authenticated account (PR:H); code execution crossing to service engines gives S:C, and I assess A:H since RCE typically enables availability impact, unlike the vendor's A:N.
Primary rating from Vendor (vmware).
CVSS VectorVendor: vmware
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Lifecycle Timeline
2DescriptionCVE.org
VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated user with network access may be able to inject and execute code.
Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)
Articles & Coverage 1
AnalysisAI
Remote code execution in VMware Avi Load Balancer (versions 22.1.x, 30.1.x/30.2.x, 31.1.x/31.2.x, and 32.1.1) allows an authenticated, high-privileged user with network access to inject and execute arbitrary code (CWE-94). Broadcom/VMware disclosed the flaw with a CVSS 3.1 score of 8.7 and a scope-changed vector, meaning successful exploitation can affect components beyond the vulnerable module. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated user holding high privileges on the Avi Load Balancer Controller (PR:H) with network access to its management interface/API; it is not exploitable by anonymous or low-privileged users against a default posture. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals point to a genuine but privilege-gated risk. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A malicious insider or an attacker who has phished or otherwise compromised a privileged Avi Controller account authenticates to the management interface over the network and submits crafted input to a code-injection-vulnerable function, causing the Controller to execute attacker-supplied code. Because the vector is network-based with low complexity and no user interaction (AV:N/AC:L/UI:N), the only real barrier is obtaining the high-privileged credentials; no public POC is currently identified, so exploitation would require independent development. |
| Remediation | Apply the vendor-released patches for your release train: upgrade 32.1.1 to 32.1.2; 31.1.1-31.2.2 to 31.2.2-2p3; 30.1.1-30.2.6 to 30.2.7; and 22.1.1-22.1.7 to 30.2.7, per Broadcom advisory https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all VMware Avi Load Balancer instances and identify which are running versions 22.1.x, 30.1.x/30.2.x, 31.1.x/31.2.x, or 32.1.1; immediately restrict network access to management interfaces using firewall rules or network segmentation to essential administrative users only, and disable remote administration if not required. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Avi Load Balancer
View allAuthentication bypass in VMware Avi Load Balancer (versions 22.1.1-22.1.7, 30.1.1-30.2.6, and 31.1.1-31.2.2) lets a netw
Directory traversal in VMware Avi Load Balancer (formerly Avi Networks NSX Advanced Load Balancer) lets authenticated ne
Remote code execution in VMware (Broadcom) Avi Load Balancer allows a network-adjacent, high-privileged user to reach th
Authorization bypass in VMware Avi Load Balancer (branches 22.1.x, 30.x, 31.x, and 32.1.1) allows a network-based actor
Local privilege escalation in VMware (Broadcom) Avi Load Balancer allows a user who already has local access to the appl
Privilege escalation leading to remote code execution in VMware (Broadcom) Avi Load Balancer allows an authenticated use
Same weakness CWE-94 – Code Injection
View allSame technique Code Injection
View allShare
External POC / Exploit Code
Leaving vuln.today