PT-2026-34028 · Freescout Help Desk · Freescout

Published 2026-04-21 · Updated 2026-04-27 · CVE-2026-41183

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.215

Description The assigned-only restriction is correctly applied to direct conversation views and folder queries, but it is not enforced for non-folder query builders. This allows global search and the AJAX filter path to reveal conversations that should otherwise be hidden.

Recommendations Update to version 1.8.215.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-41183

Affected Products

Freescout

References · 6

• 🔥 https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-7rh8-9rgv-g35r · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-41183 · Security Note
• https://github.com/freescout-help-desk/freescout/releases/tag/1.8.215 · Note
• https://github.com/freescout-help-desk/freescout/commit/6583d6f5a593b51223904f9e0f2e721e63c76de0 · Note
• https://twitter.com/infoflowcloud/status/2048911619539759465 · Twitter Post
• https://twitter.com/CVEnew/status/2048910158303256592 · Twitter Post