Why should I use this skill instead of just checking my Exim version number?

This skill identifies if your Exim server is vulnerable to the Dead.Letter RCE by analyzing the combination of binary version, TLS library linkage (GnuTLS), and specific configuration settings like BDAT/CHUNKING.

Is this skill safe to run on a production mail server?

The skill performs a non-invasive, read-only audit of the host environment and configuration files; it does not attempt to exploit the vulnerability or make any changes to your system settings.

Which operating systems and environments are supported?

It works across major Linux distributions including Ubuntu, Debian, and RHEL, and is compatible with both bare-metal installations and containerized Exim instances.

Does this skill fix the vulnerability automatically if it is detected?

The skill identifies if the vulnerability exists and provides specific, actionable remediation steps, such as required patches or configuration changes to mitigate the risk immediately.

Do I need root access to run this security audit?

No root or administrative privileges are required, as the skill only needs read access to the Exim binary metadata and public configuration files to perform its analysis.

What exactly is included with my purchase of this skill?

You receive the full AI agent skill logic designed for CVE-2026-45185 detection, including technical documentation and any logic updates released for this specific vulnerability.

Cve 2026 45185 Dead Letter

Detect and remediate CVE-2026-45185 "Dead.Letter" RCE vulnerabilities in Exim mail servers.

Secure checkout via Stripe

30-day refund guarantee

Converts to your local currency at checkout

0 installsSecurity scanned

Works with the AI tools you already use

+20 more

+17 agents

cve-2026-45185-dead-letter

Example session with this skill installed

Check if my Exim mail server is vulnerable to the Dead.Letter exploit and show me how to fix it if it is.

Read your context and instructions
Compiled the cve-2026-45185-dead-letter

[!] VULNERABLE: Exim v4.98 detected with GnuTLS.
Check 1: Exim present [OK]
Check 2: Version 4.98 [VULNERABLE]
Check 3: Linked to GnuTLS [VULNERABLE]
Check 4: CHUNKING enabled [VULNERABLE]

Remediation: Upgrade to Exim 4.99.3 or set 'chunking_advertise_hosts =' to disable BDAT.

Connects securely to your tools. The creator never sees your data.

What you get

Audit Exim server for Dead.Letter RCE vulnerabilities.Verify if Exim is linked against vulnerable GnuTLS libraries.Implement a CI/CD security gate to prevent deploying vulnerable mail configs.Harden Exim systemd services with memory protection mitigations.

About this skill

What it does

This skill provides a specialized security audit for CVE-2026-45185 (Dead.Letter), a high-severity use-after-free vulnerability affecting Exim mail servers. It performs a comprehensive, read-only analysis of your system to determine if the local Exim installation is susceptible to remote code execution (RCE).

How it works

The skill executes a multi-point inspection of the host environment, checking:

Binary Versions: Targets Exim 4.97 through 4.99.2.
Library Linkage: Specifically detects GnuTLS builds, as OpenSSL-linked versions are unaffected.
Configuration State: Audits BDAT/CHUNKING settings to see if the vulnerable path is exposed.
System Mitigations: Evaluates ASLR levels and systemd hardening like MemoryDenyWriteExecute.

Why use this skill

Manually checking for "Dead.Letter" is error-prone because version numbers alone don't tell the whole story—vulnerability depends on the specific TLS library and configuration. This skill automates the detection logic, providing a definitive VULNERABLE, NOT VULNERABLE, or INCONCLUSIVE verdict with actionable remediation steps.

Supported Environments

Compatible with standard Linux mail server deployments (Ubuntu, Debian, RHEL) and containerized Exim instances. It requires no root privileges and makes no modifications to the system.

How to install

Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.

~30 seconds

1
Download the ZIP
Free skills download straight away. Paid skills unlock right after purchase.
2
Unzip into your skills folder
Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.
3
Ask your agent to use it
Restart the agent if it was already running. It picks the skill up automatically - no config needed.

Skills folder by agent

Click the path to copy it. Create the folder if it does not exist yet.

Reviews

No reviews yet

Be one of the first to try it. Every listed skill passes our trust checks below.

Security scanned

Passed our 8-point scan before listing

Fresh listing

Recently published to Agensi

30-day refund

Not a fit? Get your money back

Trust & safety