Directory Traversal Vulnerability in Salt Project's Master Cache

CVE-2025-22238

What is CVE-2025-22238?

A directory traversal vulnerability exists in the file cache creation process of the Salt Project's master server. An attacker may exploit this security flaw to execute arbitrary file writes or overwrites to locations outside of the intended cache directory. This can lead to unauthorized access or manipulation of sensitive files on the system. It is crucial for users of the affected Salt versions to apply the necessary updates to mitigate potential risks associated with this vulnerability.

References