CVE-2025-62348
High · 7.8CVSS
7.8
EPSS
0.2%
Published
Jan 30, 2026
CISA due date
—
The record
Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | salt | 0 | 3006.17 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Micro 5.5 | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Module for Systems Management 15 SP6 | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Module for Transactional Server 15 SP6 | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | salt | 0 | 3006.0-150500.4.65.1 |
| openSUSE:Leap 15.6 | salt | 0 | 3006.0-150500.4.65.1 |
| openSUSE:Leap 15.6 | salt-test | 0 | 3006.0-150500.4.65.1 |
| openSUSE:Leap 16.0 | salt | 0 | 3006.0-160000.3.1 |
| openSUSE:Leap 16.0 | salt-test | 0 | 3006.0-160000.3.1 |
| openSUSE:Tumbleweed | salt | 0 | 3006.0-52.1 |
Related vulnerabilities
- GHSA-77w2-v593-vxvv Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload Same vulnerability
- GHSA-vcf3-26xf-fw4m Salt Authentication Protocol Version Downgrade Allows Minion Impersonation Also affects salt
- CVE-2025-62349 Salt contains an authentication protocol version downgrade weakness that can allow a… Also affects salt
- CVE-2023-34049 The Salt-SSH pre-flight option copies the script to the target at a predictable path… Also affects salt
- CVE-2024-22232 A specially crafted url can be created which leads to a directory traversal in the salt… Also affects salt
- CVE-2024-22231 Syndic cache directory creation is vulnerable to a directory traversal attack in salt… Also affects salt
- CVE-2014-3563 Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local… Also affects salt
- CVE-2025-67726 Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters Also affects salt