CVE-2025-22242: 
Python vulnerability analysis and mitigation

CVE-2025-22242 is a vulnerability discovered in the Salt Master's "pub_ret" method that affects the worker process through file read operations. The vulnerability was disclosed on June 13, 2025, and affects Salt Project's software. The vulnerability has been assigned a CVSS v3.1 score of 5.6 (Medium) with the vector string AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H (NVD, Wiz).

The vulnerability stems from the Master's "pub_ret" method which is exposed to all minions. The core issue lies in the un-sanitized input value "jid" that is used to construct a path for reading operations. The vulnerability has been classified under CWE-400 (Uncontrolled Resource Consumption) (NVD).

An attacker could exploit this vulnerability by attempting to read from a filename that will not return any data, for example, by targeting a pipe node on the proc file system. This can result in a denial of service condition affecting the worker process (Salt Release Notes).

The vulnerability has been addressed in Salt versions 3006.12 and 3007.4. Users are advised to upgrade to these patched versions to mitigate the vulnerability (Salt Release Notes, Salt 3007.4).