# CVE-2024-35179

## Summary

- **CVE ID:** CVE-2024-35179
- **Severity:** MEDIUM
- **CVSS Score:** 6.8 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)
- **CWE:** CWE-271
- **Published:** May 15, 2024
- **Last Modified:** Mar 13, 2026

## Description

Stalwart Mail Server is an open-source mail server. Prior to version 0.8.0, when using `RUN_AS_USER`, the specified user (and therefore, web interface admins) can read arbitrary files as root. This issue affects admins who have set up to run stalwart with `RUN_AS_USER` who handed out admin credentials to the mail server but expect these to only grant access according to the `RUN_AS_USER` and are attacked where the attackers managed to achieve Arbitrary Code Execution using another vulnerability. Version 0.8.0 contains a patch for the issue.

## Affected Products

- stalwartlabs — mail-server (< 0.8.0)

## References

- [CNA](https://github.com/stalwartlabs/mail-server/security/advisories/GHSA-5pfx-j27j-4c6h)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.62%
- **EPSS Percentile:** 47.8

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._