CVE-2024-49394

CVE-2024-49394CVE-2024-49394

mutt / mutt

Description

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.

Scoring

CVSS 5.3 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Last modified2026-06-26
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.