Directory Traversal Vulnerability in Exim Mail Transfer Agent

CVE-2026-66140

What is CVE-2026-66140?

Exim Mail Transfer Agent versions prior to 4.99.5 are susceptible to a directory traversal vulnerability that allows attackers to access files located outside of the intended spool area. This is achieved through the mishandling of queue-name arguments, which can lead to unintended file access and privilege escalation. Organizations using affected versions are advised to upgrade to the latest release to mitigate this risk.

References