CVE-2026-47242

A flaw was found in Net::IMAP, a Ruby library that implements Internet Message Access Protocol (IMAP) client functionality. This vulnerability arises from improper input validation when handling ID field values and arguments to the enable command. A remote attacker could exploit this by injecting specially crafted input, leading to the execution of arbitrary IMAP commands. This could allow an attacker to manipulate IMAP sessions or access sensitive information.

This is an Important flaw in the Net::IMAP Ruby library, which could allow a remote attacker to inject arbitrary IMAP commands. This is due to improper input validation when handling ID field values and arguments to the enable command. Successful exploitation requires user interaction, but could lead to manipulation of IMAP sessions or access to sensitive data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Update to the fixed version of affected product.