Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

While no evidence of exploitation has been observed, this RCE in SmarterMail should be patched as soon as possible. It was assigned the maximum CVSS score of 10

The version of SmarterTools SmarterMail installed on the remote host is prior to 100.0.9413. It is, therefore, affected by a remote code execution vulnerability. SmarterTools SmarterMail contains an unrestricted file upload vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

SmarterMail version prior to build 9413 are affected by an Unrestricted File Upload vulnerability. An unauthenticated attacker can exploit this issue to upload arbitrary files to the server, which could lead to remote code execution.

ID	Name	Product	Family	Severity
297222	SmarterMail < 100.0.9413 Unrestricted File Upload Remote Code Execution (CVE-2025-52691)	Nessus	CGI abuses	critical
115117	SmarterMail < build 9413 Unrestricted File Upload	Web App Scanning	Component Vulnerability	critical

Detections

Analytics

CVE-2025-52691

critical

Tenable Plugins

critical

critical