It's an SQL injection vulnerability while scanning emails, including Postgres' SQL query to COPY column TO PROGRAM 'command' which executes commands as root. Yes, the process which scans emails can be exploited to pass SQL commands to Postgres which runs as root.Complètement "secure", en effet
