CVE-2020-11652: SaltStack Salt Path Traversal Vulnerability

Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 86.2% chance of exploitation in the next 30 days.

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.

Affected products

• Blackberry Workspaces Server: up to and including 7.1.3; from 8.0.0, up to and including 8.2.6; version 9.1.0 only
• Canonical Ubuntu Linux: version 16.04 only; version 18.04 only
• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Opensuse Leap: version 15.1 only
• SaltStack Salt: before 2019.2.4 (fixed in 2019.2.4); from 3000, before 3000.2 (fixed in 3000.2)
• VMware Application Remote Collector: version 7.5.0 only; version 8.0.0 only

Published 2020-04-30. Last modified 2026-06-17.