CVE-2025-65318

CRITICAL 9.1CVE-2025-65318 · Published 16/12/2025 · updated 05/07/2026

In short

CVE-2025-65318 is a CRITICAL (CVSS 9.1) vulnerability affecting canary mail (canarymail).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
canary mail canarymail	`≤ 5.1.40`	No fix yet

Description

When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of both Windows OS and third-party software.

References

drive.google.com/file/d/14wrTzvcLPfFsWmy-SAtDwwZKKPssBsx5/view · Exploit
bbaboha/CVE-2025-65318-and-CVE-2025-65319 · Exploit
nickvourd/RTI-Toolkit · Not Applicable

More vulnerabilities in canary mail

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free