Salt Project Salt vulnerabilities
2 vulnerabilities
Known vulnerabilities in Salt Project Salt, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2025-62349salt project · salt +4 moreSalt Master authentication protocol downgrade may enable minion impersonationSalt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues.CVSS7.5HighEPSS0.46%RoutineCVE-2025-62348salt project · salt +4 moreSalt junos module uses an unsafe YAML loader which may allow unintended code executionSalt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.CVSS7.8HighEPSS0.20%