CVE-2013-4439: SaltStack Salt

Medium severity, CVSS 4.9. EPSS: 1.5% chance of exploitation in the next 30 days.

Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key.

Affected products

• SaltStack Salt: version 0.15.0 only; version 0.15.1 only; version 0.16.0 only; version 0.16.2 only; version 0.16.3 only; version 0.16.4 only; …

Published 2013-11-05. Last modified 2026-06-16.