Email infrastructure is a critical part of modern IT environments, supporting everything from customer communication and password resets to automated system notifications. Exim, one of the most widely used Mail Transfer Agents (MTAs), powers email delivery for countless Linux servers and hosting platforms. Because of its widespread adoption, security vulnerabilities affecting Exim deserve immediate attention from system administrators. One such issue is GCVE-25-2026-07-45-3, a recently disclosed vulnerability involving Exim’s handling of .forward files under specific configurations. Unlike vulnerabilities that can be exploited remotely, this issue is classified as a local privilege escalation, meaning an attacker must already have access to a local user account before attempting exploitation. While this limits the attack surface, affected systems should still be patched promptly …
