Skip to content
OpenAdvisories

Product · VMware

SALT

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2025-22239

    CVE-2025-22239 salt advisory

    Arbitrary event injection on Salt Master. The master's "_minion_event" method can be used by and authorized minion to send arbitrary events onto the master's event bus.

    VMware SALT salt salt Ubuntu PyPI
  • High 8.1
    CVE-2025-22236

    CVE-2025-22236 salt advisory

    Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions (>= 3007.0).

    VMware SALT salt salt Ubuntu PyPI