PT-2026-34039 · Freescout Help Desk · Freescout

Published 2026-04-21 · Updated 2026-04-21 · CVE-2026-41192

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.215

Description The reply and draft flows trust encrypted attachment IDs supplied by the client. Any IDs included in the attachments all[] variable but omitted from retained lists are decrypted and passed to the deleteByIds() function of the Attachment class. Since load attachments returns encrypted IDs for attachments within a visible conversation, a mailbox peer can replay these IDs through the 'save draft' endpoint to delete the original attachment row and file.

Recommendations Update to version 1.8.215.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-41192

Affected Products

Freescout

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-41192 · Security Note
• https://github.com/freescout-help-desk/freescout/releases/tag/1.8.215 · Note
• https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-cv36-2j23-x6g3 · Note
• https://github.com/freescout-help-desk/freescout/commit/5f182818e2391f8e711fec6ae6648ac0b367bef5 · Note
• https://twitter.com/infoflowcloud/status/2046676593410449770 · Twitter Post
• https://twitter.com/CVEnew/status/2046675011843334348 · Twitter Post