MailWatch for MailScanner versions prior to 1.2.27 contain an authorization bypass vulnerability. Authenticated users with low privileges can release or permanently delete quarantined emails belonging to other users or domains by manipulating the message ID parameter. This occurs because the application does not verify message ownership when processing quarantine actions, despite requiring a valid session and CSRF token. The vulnerability is fixed in version 1.2.27.