CVE-2025-22237: 
Python vulnerability analysis and mitigation

CVE-2025-22237 is a security vulnerability discovered in Salt Project's software that affects the 'on demand' pillar functionality. The vulnerability was disclosed and published to the CVE List on June 13, 2025. It impacts Salt versions prior to 3006.12 and 3007.4, allowing attackers with access to a minion key to potentially execute arbitrary commands on the master system (Wiz).

The vulnerability is classified as CWE-77 (Improper Neutralization of Special Elements used in a Command Injection). It has been assigned a CVSS v3.1 base score of 6.7 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. The vulnerability specifically involves the exploitation of the 'on demand' pillar functionality through a specially crafted git URL, which can lead to command execution with master process privileges (Wiz, NVD).

When successfully exploited, the vulnerability allows the attacker to execute arbitrary commands on the master system with the same privileges as the master process. This could potentially lead to complete system compromise at the master level, affecting the confidentiality, integrity, and availability of the Salt master system (Wiz).

The vulnerability has been patched in Salt versions 3006.12 and 3007.4. Users are advised to upgrade to these or later versions to mitigate the risk (Salt Release Notes, Salt Release Notes).