CVE-2020-11652VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2020-11652: SaltStack Salt Path Traversal Vulnerability

Affects SaltStack SaltSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 86.2% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2020-11652 (opens in a new tab)

Description

CVE-2020-11652 is a path traversal vulnerability in the SaltStack Salt master process ClearFuncs that allows authenticated users to access directories outside intended paths. Users adhering to fundamental internet security best practices are not affected. The vulnerability has been exploited in the wild.

Summary

SaltStack Salt contains a path traversal vulnerability (CWE-22) in the salt-master process ClearFuncs, enabling authenticated users to access arbitrary directories. This vulnerability has been observed in active exploitation. No specific affected versions or patch information is provided in the input data.

Impact

Authenticated users can exploit this vulnerability to access directories outside the intended scope, potentially exposing sensitive files. The vulnerability has been exploited in the wild, indicating active threat usage. However, users following fundamental internet security guidelines are not affected.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should ensure strict adherence to authentication and access control best practices as a mitigating factor.

Weaknesses

CWE-22Path Traversal (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 08:56:14 UTC

Weaknesses

References

Related threats