mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in…
mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in the shared rspamd container by storing a malicious domain-wide footer. Attackers can embed a Jinja macro with an os.execute default value, rendered by the rspamd MOO_FOOTER prefilter, to read or inject mail for every tenant and disable filtering.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Mailcow
- Product
- mailcow: dockerized
- CVSS v3.1
- 9.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- Exploitation
- SSVC poc, automatable no, impact total
- Weakness
- CWE-1336
- NVD status
- Received
Why it ranks 48 (High)
- Public exploit code reported
- CVSS v3.1 9.1 critical
- SSVC: total technical impact
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.