CVE-2024-36486

A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740). When an archived virtual machine is restored, the prl_vmarchiver tool decompresses the file and writes the content back to its original location using root privileges. An attacker can exploit this process by using a hard link to write to an arbitrary file, potentially resulting in privilege escalation.

Scoring

Severity

HIGH

CVSS base score

7.8

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS probability

0.32%

CWE

CWE-62

Published

2025-06-03

Last modified

2026-03-13

Affected products

• Parallels Parallels Desktop for Mac

Weakness type

• CWE-62

Related vulnerabilities

• CVE-2026-32232 — ZeptoClaw: Path boundary checks bypass via symlink, TOCTOU, and hardlink
• CVE-2024-54189 — A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for...

Markdown version · Browse all CVEs