CVE-2009-1631: Gnome Evolution

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.

Affected products

• Gnome Evolution: up to and including 2.26.1; version 1.0.8 only; version 1.2 only; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; …

Published 2009-05-14. Last modified 2026-06-16.