The autonomous security agent XBOW has uncovered a critical unauthenticated remote code execution vulnerability in the Exim mail server. Tracked as CVE-2026-45185, this use-after-free flaw allows attackers to execute arbitrary code without requiring authentication. The finding highlights the growing competition between human security researchers and AI-driven autonomous exploit development during the disclosure process.