Try a two-step process.

Have your CGI drop files into a known directory, then have a separate process (one running with the permissions of the logged-in user, perhaps) periodically scan the directory and process any files that need to be mailed.