https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:51:35.925977+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-22237 CVE-2025-22237 — CVE-2025-22237 salt advisory 2026-10-05T01:51:35.958378+00:00

Affected: VMware SALT

An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary command to be run on the master with the same privileges as the master process.

 https://cve.radiocsirt.org/vuln/ghsa-fcr4-h6c4-rvvp GHSA-fcr4-h6c4-rvvp — Salt's on demand pillar functionality vulnerable to arbitrary command injections 2026-10-05T01:51:35.958444+00:00

Affected: PyPI: salt

An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary command to be run on the master with the same privileges as the master process.