Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-62348

Salt junos module uses an unsafe YAML loader which may allow unintended code execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Salt Project Salt

Default version status: unaffected

  • 3006.0 to < 3006.17affected

Salt Project Salt

Default version status: unaffected

  • 3007.0 to < 3007.9affected

References