Salt Junos Execution Module Unsafe YAML Processing Leading to Code Execution Vulnerability

A vulnerability exists in the Junos execution module of Salt due to improper handling of YAML decoding. This flaw allows a specially crafted YAML payload to be processed in a way that could execute unintended code within the Salt process. The issue arises from the execution module's use of an unsafe YAML load function, which can lead to arbitrary code execution.

Impact

Exploitation of this vulnerability could result in arbitrary code execution under the context of the Salt process.

Remediation

Users can upgrade to Salt version 3006.18 or later, where this vulnerability has been addressed.