CVE-2026-0394

A flaw was found in dovecot. When configured to use per-domain password files, a path traversal vulnerability can be exploited by a remote attacker. This occurs if the password files are located one directory level above /etc or if a slash character is permitted in the domain component, allowing partial control over the directory path. Successful exploitation enables the attacker to read sensitive files, such as /etc/passwd, which could lead to unauthorized authentication or the unexpected validation of system users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.