GitHub Advisoryadvisory · PyPI

GHSA-7f3f-x5f5-79gw Salt's file contents overwrite the VirtKey class

MEDIUM Published 2025-06-13 Modified 2025-06-17 Official page ↗
Aliases
CVE-2025-22241
Ecosystem
PyPI
Packages
salt
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
Weaknesses
CWE-22, CWE-73
Reviewed
2025-06-13

Affected packages

• PyPI salt: >= 3007.0rc1, < 3007.4 → fixed in 3007.4 • PyPI salt: >= 3006.0rc1, < 3006.12 → fixed in 3006.12

Description

File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki directory”. The functionality is used to auto-accept Minion authentication keys based on a pre-placed “authorization file” at a specific location and is present in the default configuration.

Related

Alias · CVE (1)

  • CVE-2025-22241 File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths… vulnerability

Weakness · CWE (2)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-73 External Control of File Name or Path weakness

References