VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution.
Apply updates per vendor instructions.
CWE-20
CWE-470
CWE-918