CVE-2026-47868
Received Received - Intake

Local Privilege Escalation in VMware Avi Load Balancer

Publication date: 2026-07-18

Last updated on: 2026-07-18

Assigner: VMware

Description
VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be able to escalate their privileges to run code as root. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-18
Last Modified
2026-07-18
Generated
2026-07-18
AI Q&A
2026-07-18
EPSS Evaluated
N/A
NVD
CVE-2026-47868
EUVD
EUVD-2026-45363

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
vmware avi_load_balancer to 32.1.2 (inc)
vmware avi_load_balancer From 31.1.1 (inc) to 31.2.2 (inc)
vmware avi_load_balancer From 30.1.1 (inc) to 30.2.6 (inc)
vmware avi_load_balancer From 22.1.1 (inc) to 22.1.7 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a local privilege escalation issue in VMware Avi Load Balancer. A malicious user with local access could exploit it to gain root-level privileges on the affected system.

Detection Guidance

This vulnerability requires local access to exploit. Detection should focus on verifying the installed version of VMware Avi Load Balancer. Check the version using commands like 'show version' or 'cat /etc/avi-release' on the system. Compare the output against the affected versions listed in the CVE.

Impact Analysis

If exploited, an attacker could take full control of the affected VMware Avi Load Balancer system, potentially leading to unauthorized access, data theft, or disruption of services.

Compliance Impact

This vulnerability allows local users to escalate privileges to root access, which could lead to unauthorized system modifications or data access. Such privilege escalation risks may violate compliance requirements under GDPR (data protection) and HIPAA (health data security) by enabling unauthorized access to sensitive information.

Mitigation Strategies

Upgrade affected VMware Avi Load Balancer versions to the latest patched releases (32.1.2, 31.2.2-2p3, 30.2.7, or 22.1.7). Apply the fixes immediately to prevent privilege escalation attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47868. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart