Puppet: Security Vulnerabilities
A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in versions 2023.8.4 and 2025.4.0.
CVSS Score
8.8
EPSS Score
0.001
Published
2025-06-26
Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations.
CVSS Score
6.8
EPSS Score
0.003
Published
2023-11-07
In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified.
CVSS Score
6.5
EPSS Score
0.002
Published
2023-10-06
For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked.
CVSS Score
4.4
EPSS Score
0.001
Published
2023-10-03
A privilege escalation allowing remote code execution was discovered in the orchestration service.
CVSS Score
9.8
EPSS Score
0.057
Published
2023-06-07
A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.
CVSS Score
5.3
EPSS Score
0.0
Published
2023-05-04
Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise.
CVSS Score
8.4
EPSS Score
0.007
Published
2022-10-07
Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise.
CVSS Score
8.4
EPSS Score
0.03
Published
2022-10-07
In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state.
CVSS Score
5.6
EPSS Score
0.005
Published
2022-03-02
A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007
CVSS Score
9.8
EPSS Score
0.004
Published
2021-11-18
Page 1