diff --git a/changelog/66702.security.md b/changelog/66702.security.md
new file mode 100644
index 00000000000..4fdd6b4ea3f
--- /dev/null
+++ b/changelog/66702.security.md
@@ -0,0 +1,2 @@
+CVE-2024-37088 salt-call will fail with exit code 1 if bad pillar data is
+encountered.