Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.Referenceshttps://openwall.com/lists/oss-security/2026/07/22/9
