An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary command to be run on the master with the same privileges as the master process.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade salt-transactional-updateUpgrade python3-salt-testsuiteUpgrade salt-cloudUpgrade salt-minionUpgrade salt-bash-completionUpgrade salt-apiUpgrade salt-docUpgrade salt-masterUpgrade saltUpgrade salt-fish-completionUpgrade python3-saltUpgrade salt-zsh-completionUpgrade salt-proxyUpgrade salt-sshUpgrade salt-standalone-formulas-configurationUpgrade salt-syndic | Dec 5, 2025 | Jul 23, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub