vulnerability
Alpine Linux: CVE-2025-62349: Improper Authentication
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:M/Au:M/C:C/I:C/A:P) | Jan 30, 2026 | Feb 2, 2026 | Feb 2, 2026 |
Severity
8
CVSS
(AV:N/AC:M/Au:M/C:C/I:C/A:P)
Published
Jan 30, 2026
Added
Feb 2, 2026
Modified
Feb 2, 2026
Description
Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues.
Solutions
alpine-linux-upgrade-salt-ltsalpine-linux-upgrade-salt
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.