VMware License Holders Face Delayed Security Updates Amid Subscription Shift

Some holders of VMware perpetual licenses are facing difficulties in downloading security updates. According to a report from The Register on July 24, 2025, Broadcom, the parent company of VMware, has promised to release updates «at a later time,» though no specific date has been provided. This situation raises security concerns for users.

Following its acquisition of VMware, Broadcom discontinued perpetual licenses and transitioned to a subscription model. Some clients chose not to renew their support and continue using VMware products without an active subscription. Broadcom had previously assured that these customers would still have access to critical updates, but as of this writing, that is not the case.

Several users have reported being unable to download updates from the Broadcom support portal. The support team informed them that they might need to wait up to 90 days for access.

On July 15, VMware announced three critical vulnerabilities affecting eight of its products. Updates addressing these issues are only available to clients with verified rights. Others will receive the updates at a later time, but the specifics remain unclear.

Broadcom attributed the delays to restrictions on the support portal. Meanwhile, the company is sending audit result letters to perpetual license holders. This might be an attempt to incentivize users to switch to a subscription model.

In 2025, VMware released 11 security bulletins. Some vulnerabilities allow code execution on the host via a virtual machine, presenting a critical risk.

By May 2025, many users lost access to updates. VMware’s support confirmed that the issuance of updates was delayed due to access rights verification. This new procedure has been in effect since late spring. In May, Broadcom also ceased support for VMware products purchased under perpetual licenses, stating that support would be available solely to paying subscribers.

Previously, a court in the Netherlands ordered VMware to provide support to the government agency Rijkswaterstaat, which has been using perpetual licenses for 15 years and opted not to switch to a subscription. The cost of the subscription was found to be 85% higher. VMware has not commented on the court’s ruling.