GNU Mailutils versions 2.0 up to and including 3.7 suffer from a local privilege escalation vulnerability.