CVE-2025-22238

MEDIUM

Salt 3006.0rc1-3006.11 and 3007.0-3007.3 - Path Traversal and Arbitrary File Write in Minion File Cache

Title source: llm

Description

Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.

References (2)

Core 2

Core References

Release Notes

https://docs.saltproject.io/en/3006/topics/releases/3006.12.html

Release Notes

https://docs.saltproject.io/en/3007/topics/releases/3007.4.html

Scores

CVSS v3 4.2

EPSS 0.0034

EPSS Percentile 57.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-22

Status published

Products (3)

pypi/salt 3006.0rc1 - 3006.12PyPI

VMware/SALT 3006.x - 3006.12

VMware/SALT 3007.x - 3007.4

Published Jun 13, 2025

Tracked Since Feb 18, 2026