CVE-2025-62349
Medium · 6.2CVSS
6.2
EPSS
0.5%
Published
Jan 30, 2026
CISA due date
—
The record
Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | salt | 3006.12 | 3006.17 |
| PyPI | salt | 3007.4 | 3007.9 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Micro 5.5 | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Module for Systems Management 15 SP6 | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Module for Transactional Server 15 SP6 | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | salt | 0 | 3006.0-150500.4.65.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | salt | 0 | 3006.0-150500.4.65.1 |
| openSUSE:Leap 15.6 | salt | 0 | 3006.0-150500.4.65.1 |
| openSUSE:Leap 15.6 | salt-test | 0 | 3006.0-150500.4.65.1 |
| openSUSE:Leap 16.0 | salt | 0 | 3006.0-160000.3.1 |
| openSUSE:Leap 16.0 | salt-test | 0 | 3006.0-160000.3.1 |
| openSUSE:Tumbleweed | salt | 0 | 3006.0-52.1 |
Related vulnerabilities
- GHSA-vcf3-26xf-fw4m Salt Authentication Protocol Version Downgrade Allows Minion Impersonation Same vulnerability
- GHSA-77w2-v593-vxvv Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload Also affects salt
- CVE-2025-62348 Salt's junos execution module contained an unsafe YAML decode/load usage. Also affects salt
- CVE-2023-34049 The Salt-SSH pre-flight option copies the script to the target at a predictable path… Also affects salt
- CVE-2024-22232 A specially crafted url can be created which leads to a directory traversal in the salt… Also affects salt
- CVE-2024-22231 Syndic cache directory creation is vulnerable to a directory traversal attack in salt… Also affects salt
- CVE-2014-3563 Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local… Also affects salt
- CVE-2025-67726 Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters Also affects salt