---
id: 8892
title: "We Asked Claude to Audit Sagredo's qmail. It found a RCE."
source_domain: calif.io
source_url: "https://calif.io/research/qmail"
published_at: "2026-04-16T00:00:00Z"
tags: ["ai-security", "rce", "vulnerability-research", "claude", "code-audit", "ai-agent", "madbugs", "qmail"]
phying_url: "https://phying.com/item/8892"
lang: en
---

# We Asked Claude to Audit Sagredo's qmail. It found a RCE.

## Summary

One prompt, 101 minutes, and a working exploit against a widely deployed qmail fork.

## Intelligence Metadata

- **Sources:** calif.io
- **Published:** 2026-04-16T00:00:00Z
- **Original:** https://calif.io/research/qmail
- **Phying News:** https://phying.com/item/8892