CVE-2026-47241: CWE-162: Improper Neutralization of Trailing Special Elements in ruby net-imap
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled input, an attacker can force the next command to be absorbed as a continuation of the first command. This will cause the first command to eventually fail, but also prevents it from returning until another command is sent (from another thread). That other command will not return until the connection is closed. This vulnerability is fixed in 0.6.5 and 0.5.15.
AI Analysis
Technical Summary
The Ruby net-imap library implements IMAP client functionality. Versions before 0.6.5 and 0.5.15 accept raw string arguments in some commands that are insufficiently sanitized, allowing an attacker controlling input to cause the next command to be absorbed as a continuation of the first. This results in the first command failing and blocking until another command is sent from a different thread, which itself blocks until connection closure. This improper neutralization of trailing special elements (CWE-162) leads to denial of service-like behavior. The vulnerability is resolved in net-imap versions 0.6.5 and 0.5.15.
Potential Impact
An attacker who can supply user-controlled input to vulnerable net-imap commands can cause commands to block indefinitely, resulting in denial of service conditions affecting the IMAP client. The first command fails and does not return until another command is sent from another thread, which then blocks until the connection closes. There is no indication of code execution or data disclosure. The CVSS 4.0 base score is 2.1, indicating low severity.
Mitigation Recommendations
This vulnerability is fixed in net-imap versions 0.6.5 and 0.5.15. Users should upgrade to at least these versions to remediate the issue. No other mitigation or workaround is indicated.
CVE-2026-47241: CWE-162: Improper Neutralization of Trailing Special Elements in ruby net-imap
Description
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled input, an attacker can force the next command to be absorbed as a continuation of the first command. This will cause the first command to eventually fail, but also prevents it from returning until another command is sent (from another thread). That other command will not return until the connection is closed. This vulnerability is fixed in 0.6.5 and 0.5.15.
CVSS v4.0
Score 2.1low
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Ruby net-imap library implements IMAP client functionality. Versions before 0.6.5 and 0.5.15 accept raw string arguments in some commands that are insufficiently sanitized, allowing an attacker controlling input to cause the next command to be absorbed as a continuation of the first. This results in the first command failing and blocking until another command is sent from a different thread, which itself blocks until connection closure. This improper neutralization of trailing special elements (CWE-162) leads to denial of service-like behavior. The vulnerability is resolved in net-imap versions 0.6.5 and 0.5.15.
Potential Impact
An attacker who can supply user-controlled input to vulnerable net-imap commands can cause commands to block indefinitely, resulting in denial of service conditions affecting the IMAP client. The first command fails and does not return until another command is sent from another thread, which then blocks until the connection closes. There is no indication of code execution or data disclosure. The CVSS 4.0 base score is 2.1, indicating low severity.
Mitigation Recommendations
This vulnerability is fixed in net-imap versions 0.6.5 and 0.5.15. Users should upgrade to at least these versions to remediate the issue. No other mitigation or workaround is indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-18T22:54:18.272Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a39a0f5eed863c81e6b01e1
Added to database: 06/22/2026, 20:54:13 UTC
Last enriched: 06/29/2026, 21:53:57 UTC
Last updated: 08/06/2026, 00:41:13 UTC
Views: 73
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.