salt -- Maliciously crafted minion IDs can cause unwanted directory traversals on the Salt-master

SaltStack reports:

Correct a flaw in minion id validation which could allow certain
minions to authenticate to a master despite not having the correct
credentials. To exploit the vulnerability, an attacker must create a
salt-minion with an ID containing characters that will cause a
directory traversal.
Credit for discovering the security flaw goes to: [email protected]