MEDIUM4.2
PYSEC-2026-1901
Salt vulnerable to directory traversal attack in minion file cache creation
Quick fix
PYSEC-2026-1901 — salt: upgrade to the fixed version with the command below.
pip install --upgrade 'salt>=3006.12'Details
Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-22238[ADVISORY]
- https://github.com/saltstack/salt/commit/4b30218edf1a979855ea191d72b30c89f4a5a582[WEB]
- https://docs.saltproject.io/en/3006/topics/releases/3006.12.html[WEB]
- https://docs.saltproject.io/en/3007/topics/releases/3007.4.html[WEB]
- https://github.com/saltstack/salt[PACKAGE]
- https://pypi.org/project/salt[PACKAGE]
- https://github.com/advisories/GHSA-r546-h3ff-q585[ADVISORY]