CVE-2025-22238: Salt vulnerable to directory traversal attack in minion file cache creation

June 13, 2025

Directory traversal attack in minion file cache creation. The master’s default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite ‘cache’ files outside of the cache directory.

References

docs.saltproject.io/en/3006/topics/releases/3006.12.html
docs.saltproject.io/en/3007/topics/releases/3007.4.html
github.com/advisories/GHSA-r546-h3ff-q585
github.com/saltstack/salt
github.com/saltstack/salt/commit/4b30218edf1a979855ea191d72b30c89f4a5a582
nvd.nist.gov/vuln/detail/CVE-2025-22238

Code Behaviors & Features

Detect and mitigate CVE-2025-22238 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →