> CVE-2025-34075

« BACK_TO_HOME
PUBLISHED
2025-07-02 20:15
MODIFIED
2025-07-16 14:15
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 GITHUB 🔗 2026-11-11

> DESCRIPTION

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Initially assigned to document an issues that allows guest VM to modify the host’s Vagrantfile via default synced folder, leading to host-side code execution. Rejected as CVE due to documented, intended behavior that does not violate a claimed security boundary.  https://developer.hashicorp.com/vagrant/docs/synced-folders

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-hqp6-mjw3-f586 MODERATE

HashiCorp Vagrant has code injection vulnerability through default synced folders

AFFECTED PACKAGES:
RUBYGEMS / vagrant
>= 2.2.10, < 2.4.7
Fixed in: 2.4.7

> HISTORIQUE DES MODIFICATIONS

Première apparition
02/07/2025 20:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:05
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME