CVE-2018-6512: Puppet Pe-Razor-Server

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server. Affected releases are Puppet Enterprise: 2018.1.x versions prior to 2018.1.1 and razor-server and pe-razor-server prior to 1.9.0.0.

Affected products

• Puppet Pe-Razor-Server: before 1.9.0.0 (fixed in 1.9.0.0)
• Puppet Puppet Enterprise: from 2018.1.0, before 2018.1.1 (fixed in 2018.1.1)
• Puppet Razor-Server: before 1.9.0.0 (fixed in 1.9.0.0)

Published 2018-06-11. Last modified 2026-06-17.