CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.

Score

CVSS 3.1 7.8 High

Status

Analyzed - cve@mitre.org

Published

2026-07-24

Last modified

2026-07-24

Weaknesses

CWE-829

Affected products

• Exim (Exim)

References

• https://openwall.com/lists/oss-security/2026/07/22/9