CVE-2025-22236: 
Python vulnerability analysis and mitigation

CVE-2025-22236 is a minion event bus authorization bypass vulnerability affecting Salt Project software versions >= 3007.0. The vulnerability was discovered and disclosed by VMware, with the initial record created on January 2, 2025, and published on June 13, 2025 (CVE Details).

The vulnerability has been assigned a CVSS v3.1 base score of 8.1 (HIGH) with the vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L. The vulnerability is classified as CWE-287 (Improper Authentication). The technical nature of the vulnerability involves an authorization bypass in the minion event bus system, where an attacker with access to a minion key can craft specific messages (Salt Docs).

The vulnerability has significant security implications with high confidentiality and integrity impact, and low availability impact. The scope is changed, indicating that the vulnerability can affect resources beyond its security scope. The primary impact allows an attacker with access to a minion key to execute unauthorized jobs on other minions in the system (Wiz).

The vulnerability has been addressed in Salt Project's release versions 3006.12 and 3007.4. Users are advised to upgrade to these patched versions to mitigate the vulnerability (Salt Docs).