CVE-2025-62349

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

6.2 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L                                    

Vulnerability Description

Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues.

Vulnerability Details

Published Date

January 30, 2026

Last Modified

February 04, 2026

CWE ID

CWE-287

Source

NVD

Vendor

Salt Project

Product

Salt

External References

https://docs.saltproject.io/en/latest/topics/releases/3006.17.html
https://docs.saltproject.io/en/latest/topics/releases/3007.9.html

CVE-2025-62349

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment