~ / search / GHSA-xh32-3m67-qjgf

GHSA-xh32-3m67-qjgf

Salt allows arbitrary directory creation or file deletion

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-22240

Packages

EcosystemPackageAffectedFixed in
PyPI salt >= 3007.0rc1, < 3007.4 3007.4
PyPI salt >= 3006.0rc1, < 3006.12 3006.12

Details

As written in the advisory (Markdown source, shown as plain text).

Arbitrary directory creation or file deletion. In the find_file method of the GitFS class, a path is created using os.path.join using unvalidated input from the “tgt_env” variable. This can be exploited by an attacker to delete any file on the Master's process has permissions to.

References

External links from the advisory. They lead to third-party sites.