Skip to content
OpenAdvisories

Vendor

Salt Project

3 known vulnerabilities.

Products

Salt 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.2
    CVE-2025-62349

    Salt Master authentication protocol downgrade may enable minion impersonation

    Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introd…

    Salt Project Salt salt salt Alpine PyPI
  • Medium 6.7
    CVE-2023-34049

    Salt security advisory release - 2023-OCT-27

    The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they ca…

    Salt Project Salt salt salt Ubuntu PyPI