GitHub Advisoryadvisory · PyPI

GHSA-fcr4-h6c4-rvvp Salt's on demand pillar functionality vulnerable to arbitrary command injections

MEDIUM Published 2025-06-13 Modified 2025-06-13 Official page ↗
Aliases
CVE-2025-22237
Ecosystem
PyPI
Packages
salt
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77
Reviewed
2025-06-13

Affected packages

• PyPI salt: >= 3006.0rc1, < 3006.12 → fixed in 3006.12 • PyPI salt: >= 3007.0rc1, < 3007.4 → fixed in 3007.4

Description

An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary command to be run on the master with the same privileges as the master process.

Related

Alias · CVE (1)

  • CVE-2025-22237 An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause… vulnerability

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References