Reddit NetSec

AlienVault OTX General

CVE Database V5

Reddit InfoSec News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki directory”. The functionality is used to auto-accept Minion authentication keys based on a pre-placed “authorization file” at a specific location and is present in the default configuration.

CVE-2025-22241 is a medium severity vulnerability affecting VMware SALT versions 3006.x and 3007.x. The vulnerability arises from improper validation of input used to construct file paths within the VirtKey class, which is invoked during requests for "on-demand pillar" data. Specifically, unvalidated input is used to create paths to the "pki directory," a critical location that stores authentication keys. This flaw is compounded by the default configuration behavior that auto-accepts Minion authentication keys if an "authorization file" is pre-placed at a specific location. An attacker with high privileges and local access could exploit this vulnerability by manipulating the input to overwrite file contents within the pki directory, potentially replacing or injecting malicious authorization files. This could allow unauthorized Minion authentication key acceptance, leading to elevated access within the Salt infrastructure. The CVSS 3.1 score of 5.6 reflects a medium severity, with the vector indicating that exploitation requires local access (AV:L), high attack complexity (AC:H), high privileges (PR:H), and user interaction (UI:R). The impact on confidentiality and integrity is high, as unauthorized key acceptance could lead to unauthorized command execution or data exposure. Availability impact is not significant. No known exploits are currently reported in the wild, and no patches or mitigations have been explicitly linked yet. The vulnerability is present in default configurations, increasing the risk if systems remain unpatched or unconfigured securely.

Detailed information about CVE-2025-22241: Vulnerability in VMware SALT affecting VMware SALT. Get real-time updates, technical details, and mitigation strategi

Title	Severity	Type	Source	Date

Threats Tagged 'cve-2025-22241'

Filter Threats

Threats Tagged 'cve-2025-22241'