CVE-2026-52681

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1

Description Sieve CPU resource usage is tracked within the compiled script, enabling an attacker with valid credentials to reset accounting by repeatedly changing the active script. Additionally, compiled script files remain on the system after a script is deleted or renamed. These issues allow the configured Sieve CPU limit to be bypassed, leading to sustained CPU consumption and increased disk usage, which can result in service degradation for mail delivery.

Recommendations Update to version 2.4.5-1.1. Monitor the system for abnormal CPU usage and disk consumption.