PyPI/salt CVE-2021-25315: high 7.8, EPSS 2.29%

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify

Action: Upgrade salt to 3002.2 or later.

pip install salt==3002.2

Affected

Fixed versions

Sources

• osv: PYSEC-2021-891
• https://bugzilla.suse.com/show_bug.cgi?id=1182382
• https://github.com/advisories/GHSA-pmj6-9f8c-8g2m

CVE-2021-25315 · published 2021-03-03T10:15:13Z · modified 2026-06-10T17:02:39.700678181Z · JSON