Arbitrary Code Execution Vulnerability Affects Stalwart Mail Server

CVE-2024-35187

What is CVE-2024-35187?

The Stalwart Mail Server, an open-source email solution, has a vulnerability that allows attackers to achieve arbitrary code execution as the stalwart-mail user. This flaw poses a significant risk because once compromised, an attacker can elevate their privileges to gain complete root access to the system. Despite running as a separate user to limit access, the server can easily grant itself full permissions, undermining the intended isolation of system services. This results in a serious security lapse, especially for server administrators who have provided admin credentials without actually granting root access, exposing their systems to further exploitation. Affected versions have been addressed in version 0.8.0, which contains a patch to mitigate this critical issue.

References