[UPDATE] [high] SaltStack Salt: Multiple vulnerabilities

CSIRTS triage

What

Multiple vulnerabilities allow a remote, authenticated attacker to bypass security measures, manipulate files, execute arbitrary code, or trigger a denial of service.

Who is affected

Deployments of SaltStack Salt are affected.

Urgency

Remediation is high urgency due to the potential for severe impacts including arbitrary code execution.

Action

Apply the latest patches to mitigate the vulnerabilities.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

CERT-Bund (BSI) Security Advisories (DE · national-cert · site)

Severity

high

Published

2026-07-13

Exploitation

Not in CISA KEV at last sync

Language

Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1321

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2024-388220.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all scored CVEs.
• Low exploitation riskCVE-2024-388230.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all scored CVEs.
• Low exploitation riskCVE-2024-388240.97% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 59% of all scored CVEs.
• Low exploitation riskCVE-2024-388250.14% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 4% of all scored CVEs.
• Low exploitation riskCVE-2025-222360.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.
• Low exploitation riskCVE-2025-222370.16% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.
• Low exploitation riskCVE-2025-222380.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all scored CVEs.
• Low exploitation riskCVE-2025-222390.16% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all scored CVEs.
• Low exploitation riskCVE-2025-222400.14% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 4% of all scored CVEs.
• Low exploitation riskCVE-2025-222410.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all scored CVEs.

Referenced CVEs

Recent advisories for SaltStack Salt

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• high[UPDATE] [hoch] SaltStack Salt: Mehre Schwachstellencert-bund · 2026-08-03
• medium[UPDATE] [medium] SaltStack Salt: Multiple vulnerabilitiescert-bund · 2026-07-13
• criticalexploitedCVE-2020-11652: SaltStack Salt Path Traversal Vulnerabilitycisa-kev · 2021-11-03
• criticalexploitedCVE-2020-11651: SaltStack Salt Authentication Bypass Vulnerabilitycisa-kev · 2021-11-03
• criticalexploitedCVE-2020-16846: SaltStack Salt Shell Injection Vulnerabilitycisa-kev · 2021-11-03

More from CERT-Bund (BSI) Security Advisories

• high[NEU] [hoch] rclone: Mehrere Schwachstellen2026-08-03
• high[NEU] [hoch] Bouncy Castle: Mehrere Schwachstellen2026-08-03
• medium[NEU] [mittel] N-able N-Central: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen2026-08-03
• high[NEU] [hoch] IBM Langflow Desktop: Mehrere Schwachstellen2026-08-03
• high[NEU] [hoch] Wazuh: Mehrere Schwachstellen2026-08-03