PoC Released for VMware Workstation Guest-to-Host Escape Vulnerability

PoC Released for VMware Workstation Guest-to-Host Escape Vulnerability reports a proof-of-concept path that allows a compromised guest VM to escape to the host by exploiting a logic flaw in VMware’s backdoor/RPC handling, enabling memory corruption and code execution on the host process. The write-up, according to NCC Group, demonstrates a practical exploitation route from guest userland to host compromise and real-world risk validation.

The vulnerability allows breaking VM isolation and arbitrary code execution in the host context of the Workstation hypervisor, with potential access to the host file system and other VMs; in multi-VM environments, this could enable data theft and lateral movement. The article lists CVE IDs CVE-2023-20870, CVE-2023-34044, and CVE-2023-20869 and notes affected VMware Workstation versions as per the NCC Group report.

It also provides a high-level PoC outline and mitigation guidance, including applying VMware security updates and limiting untrusted workloads, as well as monitoring the Workstation host process for abnormal activity.