Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2025-22236

CVE-2025-22236 salt advisory

Description

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions (>= 3007.0).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware SALT

Default version status: unaffected

  • 3006.x to < 3006.12affected
  • 3007.x to < 3007.4affected

References