CVE-2013-4438: SaltStack Remote Code Execution
Summary
CVE-2013-4438: Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. Affects salt versions < 0.17.1. Fixed in 0.17.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Salt (aka SaltStack) is an open-source software used for remote execution and configuration management. It allows administrators to manage and control a large number of servers simultaneously. The vulnerability identified as CVE-2013-4438 affects Salt versions prior to 0.17.1. This vulnerability enables remote attackers to execute arbitrary YAML code through unspecified vectors. The vendor suggests that this may not be a vulnerability as the loaded YAML has already been determined to be safe.
Vulnerability Detail
The vulnerability in SaltStack allows attackers to execute arbitrary YAML code remotely. By exploiting this vulnerability, an attacker can potentially gain unauthorized access to the system and execute malicious commands. The exact vectors through which the attack can be carried out are not specified. However, it is important to note that the vulnerability has been identified and fixed in version 0.17.1 of Salt.
How To Fix
Latest published version: 3008.3.0 as of 22 Oct 2026
pip install --upgrade "salt==3008.3.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.17.1
This is the first release that contains the fix.
pip install --upgrade "salt==0.17.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability. The recommended approach is to update to the latest version of Salt.
Conclusion
The vulnerability in SaltStack (CVE-2013-4438) allows remote code execution through unspecified vectors. It is crucial to update to version 0.17.1 or later to mitigate the risk of unauthorized access and execution of malicious code. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for salt →
FAQ
SaltStack is an open-source software used for remote execution and configuration management. It allows administrators to manage and control a large number of servers simultaneously.
The vulnerability allows remote attackers to execute arbitrary YAML code, potentially leading to unauthorized access and execution of malicious commands.
Yes, the vulnerability has been fixed in Salt version 0.17.1.
No specific workarounds have been mentioned. It is recommended to update to the latest version of Salt.
You can find more information about this vulnerability in the Salt advisory database: https://github.com/pypa/advisory-database/blob/main/vulns/salt/PYSEC-2013-13.yaml
References
Related vulnerabilities
Recent vulnerabilities recorded for salt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
