CVE-2024-38825

The salt.auth.pki module does not properly authenticate callers. The "password" field contains a public certificate which is validated against a CA certificate by the module. This is not pki authentication, as the caller does not need access to the corresponding private key for the authentication attempt to be accepted.

• CWE-287

• https://docs.saltproject.io/en/3006/topics/releases/3006.12.html
• https://docs.saltproject.io/en/3007/topics/releases/3007.4.html

Published

Jun 13, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3882A vulnerability was found in Tenda W30E 1.0.1.25(633). It ha…8.8
• CVE-2024-38820The fix for CVE-2022-22968 made disallowedFields patterns in…5.3
• CVE-2024-38821Spring WebFlux applications that have Spring Security author…9.1
• CVE-2024-38822Multiple methods in the salt master skip minion token valida…2.7
• CVE-2024-38823Salt's request server is vulnerable to replay attacks when n…2.7
• CVE-2024-38824Directory traversal vulnerability in recv_file method allows…7.5
• CVE-2024-38826Authenticated users can upload specifically crafted files to…5.3
• CVE-2024-38827The usage of String.toLowerCase() and String.toUpperCase() h…4.8
• CVE-2024-38828Spring MVC controller methods with an @RequestBody byte[] me…5.3
• CVE-2024-38829A vulnerability in Spring LDAP allows data exposure for case…3.7
• CVE-2024-3883The 3D FlipBook plugin for WordPress is vulnerable to Stored…5.4
• CVE-2024-38830VMware Aria Operations contains a local privilege escalation…7.8