HTTP Request/Response Smuggling vulnerability in Pony Mail's Lua implementation allows admin account takeover. Affects all versions of the Lua implementation. The vulnerability is marked as unsupported when assigned because the Lua implementation is retired and no fix will be released. Users are advised to find alternatives or restrict access to trusted users only. A Python implementation called Pony Mail Foal is under development but not yet released.