The vulnerability CVE-2024-49394 affects the mutt and neomutt email clients by failing to cryptographically sign the In-Reply-To email header field. This improper verification of the cryptographic signature enables an attacker to reuse an unencrypted but signed email message to impersonate the original sender. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. The vendor advisory from Red Hat is referenced but does not provide explicit patch or remediation details in the provided content.

The vulnerability allows an attacker to impersonate the original sender by reusing an unencrypted but signed email message due to the lack of cryptographic signing of the In-Reply-To header. This impacts the integrity of email communications but does not affect confidentiality or availability. There are no known exploits in the wild reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2024-49394 for current remediation guidance. No explicit patch or workaround information is provided in the available data. Users should monitor the vendor advisory for updates and apply official fixes once available.