Eclipse Vert.x Mail Client Vulnerability in Email Header Sanitization

CVE-2026-102471

What is CVE-2026-102471?

In specific versions of the Eclipse Vert.x Mail Client, a vulnerability exists where user-supplied email header names and values are not properly sanitized. This allows an unauthenticated attacker to inject arbitrary headers or modify the message structure by exploiting the lack of validation, potentially leading to email redirection and spoofing. The vulnerability affects the methods that handle email headers and MIME part metadata, thus opening up multiple avenues for exploitation, particularly through web forms or APIs sending data to the mail client.

References