CVE-2025-62349Improper Authentication in Project Salt

Severity
7.5HIGHNVD
EPSS
0.0%
top 91.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 30

Description

Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

PyPIsaltstack/salt3006.123006.17+1
CVEListV5salt_project/salt3006.123006.17+1

🔴Vulnerability Details

3
OSV
CVE-2025-62349: Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features2026-01-30
OSV
Salt Authentication Protocol Version Downgrade Allows Minion Impersonation2026-01-30
GHSA
Salt Authentication Protocol Version Downgrade Allows Minion Impersonation2026-01-30

🕵️Threat Intelligence

4
Wiz
CVE-2025-67726 Impact, Exploitability, and Mitigation Steps | Wiz
Wiz
CVE-2025-67725 Impact, Exploitability, and Mitigation Steps | Wiz
Wiz
CVE-2025-62349 Impact, Exploitability, and Mitigation Steps | Wiz
Wiz
CVE-2025-67724 Impact, Exploitability, and Mitigation Steps | Wiz