# Critical VMware Flaw Lets Virtual Machine Admins Run Code on Host

VMware disclosed a critical vulnerability in Workstation and Fusion that could allow administrators of a virtual machine to execute code on the host system. The flaw breaks the security boundary between guest and host, potentially allowing full host compromise. VMware has released patches and users are urged to apply them immediately.

**Importance:** 4/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html) — Sat, 05 Sep 2026 21:35:08 +0530
- [The Hacker News](https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account.html) — Wed, 09 Sep 2026 13:49:32 +0530