CVE-2021-27017: Puppetpu Puppet Agent

Medium severity, CVSS 6.6. EPSS: 0.6% chance of exploitation in the next 30 days.

Utilization of a module presented a security risk by allowing the deserialization of untrusted/user supplied data. This is resolved in the Puppet Agent 7.4.0 release.

Affected products

• Puppetpu Puppet Agent: from 0.0.0, before 7.4.0 (fixed in 7.4.0)

Published 2025-02-07. Last modified 2026-06-17.