CVE-2025-22236 HIGH

CVE-2025-22236: CVE-2025-22236 salt advisory

Vendor Vmware
Product SALT
Published June 13, 2025
Last update June 13, 2025
View on NVD All CVEs

CVSS base score

8.1/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

What the vulnerability does

01Description

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions (>= 3007.0).

Key dates

02Disclosure timeline

June 13, 2025 CVE published
June 13, 2025 Record updated