Technology · PyPI
salt (PyPI) vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 72 vulnerabilities in salt (PyPI): 0 in the last 7 days and 0 in the last 90 days, 4 of them critical and 3 exploited in the wild. The most recent, CVE-2025-62348, was published on 7 July 2026.
- Last 7 days
- 0
- Last 90 days
- 0
- Critical, all time
- 4
- Exploited in the wild
- 3
About salt (PyPI)
Python library for remote execution and infrastructure automation with event-driven architecture.
Latest salt (PyPI) vulnerabilities
- CVE-2025-62348: PYSEC-2026-1894 - Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML PayloadlowCVSS 3.1EPSS 0.2%
- CVE-2025-62349: PYSEC-2026-1902 - Salt Authentication Protocol Version Downgrade Allows Minion ImpersonationlowCVSS 3.1EPSS 0.4%
- CVE-2025-22242: PYSEC-2026-1896 - Salt's worker process vulnerable to denial of service through file read operationlowCVSS 3.1EPSS 0.1%
- CVE-2025-22241: PYSEC-2026-1895 - Salt's file contents overwrite the VirtKey classlowCVSS 3.1EPSS 0.2%
- CVE-2025-22237: PYSEC-2026-1898 - Salt's on demand pillar functionality vulnerable to arbitrary command injectionslowCVSS 3.1EPSS 0.2%
- CVE-2024-38825: PYSEC-2026-1893 - Salt's salt.auth.pki module does not properly authenticate callerslowCVSS 3.1EPSS 0.1%
- CVE-2025-22240: PYSEC-2026-1903 - Salt allows arbitrary directory creation or file deletionlowCVSS 3.1EPSS 0.2%
- CVE-2025-22238: PYSEC-2026-1901 - Salt vulnerable to directory traversal attack in minion file cache creationlowCVSS 3.1EPSS 0.3%
- CVE-2025-22236: PYSEC-2026-1899 - Salt has minion event bus authorization bypass vulnerabilitylowCVSS 3.1EPSS 0.2%
- CVE-2025-22239: PYSEC-2026-1897 - Salt vulnerable to arbitrary event injectionlowCVSS 3.1EPSS 0.2%
- CVE-2023-34049: PYSEC-2026-1892 - Salt preflight script could be attacker controlledlowCVSS 3.1EPSS 0.2%
- CVE-2024-22231: PYSEC-2026-1900 - Directory creation by malicious user in saltstacklowCVSS 3.1EPSS 0.7%
- CVE-2024-22232: PYSEC-2026-1891 - Path traversal in saltstacklowCVSS 3.1EPSS 0.8%
- CVE-2013-2228: PYSEC-2026-748 - SaltStack RSA Key Generation allows remote users to decrypt communicationslowCVSS 3.1EPSS 2.0%
- CVE-2024-38824: PYSEC-2026-529 - Salt vulnerable to directory traversal attack in file receiving methodlowCVSS 3.1EPSS 1.0%
- CVE-2023-20898: Salt can cause Git Providers to get wrong datalowCVSS 3.1EPSS 0.3%
- CVE-2023-20897: Salt vulnerable to denial of servicelowCVSS 3.1EPSS 1.3%
- CVE-2021-33226: PYSEC-2023-47 - Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code…infoEPSS 1.6%
- CVE-2022-22967: Salt's PAM auth fails to reject locked accountslowCVSS 3.1EPSS 2.1%
- CVE-2017-12791: SaltStack Salt directory traversal in minion id validationcriticalCVSS 9.8EPSS 4.7%
- CVE-2022-22936: SaltStack Salt Authentication Bypass by Capture-replaylowCVSS 3.1EPSS 0.8%
- CVE-2022-22935: SaltStack Salt Improper Authentication via Man in the Middle AttacklowCVSS 3.1EPSS 1.6%
- CVE-2022-22934: SaltStack Salt improper verification of cryptographic signaturelowCVSS 3.1EPSS 0.9%
- CVE-2022-22941: SaltStack Salt Permissions BypasslowCVSS 3.1EPSS 1.4%
- CVE-2021-21996: Exposure of Resource to Wrong Sphere in saltlowCVSS 3.1EPSS 3.5%
Most severe salt (PyPI) vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2020-16846: SaltStack Salt Command Injection in netapi ssh clientcriticalexploited in the wildCVSS 3.1EPSS 99.6%
- CVE-2020-11651: SaltStack Salt Unauthenticated Remote Code Executioncriticalexploited in the wildCVSS 3.1EPSS 96.6%
- CVE-2020-11652: SaltStack Salt is vulnerable Arbitrary Directory Accesscriticalexploited in the wildCVSS 3.1EPSS 86.2%
- CVE-2017-12791: SaltStack Salt directory traversal in minion id validationcriticalCVSS 9.8EPSS 4.7%
- CVE-2021-25282: SaltStack Salt Directory Traversal vulnerabilitylowCVSS 3.1EPSS 92.4%
- CVE-2021-25281: SaltStack Salt Improper Authentication vulnerabilitylowCVSS 3.1EPSS 73.1%
- CVE-2021-3197: SaltStack Salt is vulnerable to shell injection via ProxyCommand argumentlowCVSS 3.1EPSS 72.3%
- CVE-2020-25592: SaltStack Salt authentication bypass in salt-netapilowCVSS 3.1EPSS 57.7%
- CVE-2019-17361: SaltStack Salt is vulnerable to command injectionlowCVSS 3.1EPSS 15.2%
- CVE-2021-25283: SaltStack Salt Server Side Template InjectionlowCVSS 3.1EPSS 10.5%
Vulnerabilities per week
Nothing was published in the last eight weeks. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many salt (PyPI) vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/pypi-salt)<a href="https://junglewise.ai/threats/technologies/pypi-salt"><img src="https://junglewise.ai/threats/technologies/pypi-salt/badge.svg" alt="salt (PyPI) vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/pypi-salt.json, and this page as text at https://junglewise.ai/threats/technologies/pypi-salt.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "salt (PyPI) vulnerabilities", https://junglewise.ai/threats/technologies/pypi-salt, 13 November 2026.