Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Salt records in CISA KEVNo Salt vulnerabilities are listed in CISA KEV.
Priority LOW 31
The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script.
CVSS 3.1MEDIUM 6.7· Local · Low privileges · User interaction · EPSS 0.00207 · Published 2024-11-14 · Fixed in 3005.4, 3006.4 CWE-340
