CVE-2025-62348 - CVE House
Back to Database
Status published High CVE-2025-62348

Salt junos module uses an unsafe YAML loader which may allow unintended code execution

Vulnerability Description

Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-62348

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Amr Kadry

References

More from Salt Project

View All →
CVE-2025-62349
Salt Master authentication protocol downgrade may enable minion impersonation
High 7.5

Affected Vendor

Salt Project

View all reports →

Affected Software

Salt
Vulnerable Versions:
3006.0, 3007.0

Timeline

Official Publish: January 30th, 2026
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-94

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1505.003 Web Shell
Persistence
T1105 Ingress Tool Transfer
Command and Control
T1565.002 Stored Data Manipulation
Impact