---
id: "CVE-2026-62852"
page: "https://infrastack.ai/live/CVE-2026-62852"
kind: "vulnerability"
aliases: ["CVE-2026-62852"]
title: "FreeScout: restricted agents can read other conversations' replies and notes"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["freescout", "help-desk", "package", "php", "self-hosted"]
not_affected_if: ["managed-hosting", "no-restricted-users"]
published_at: "2026-11-06T17:18:33+00:00"
first_seen_at: "2026-11-06T17:43:14+00:00"
updated_at: "2026-11-06T17:45:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62852", "first_seen_at": "2026-11-06T17:43:14+00:00"}]
exploit_sources: []
---

# FreeScout: restricted agents can read other conversations' replies and notes

Link for people: https://infrastack.ai/live/CVE-2026-62852 (this .md is for agents)

FreeScout, a self-hosted help desk, lets an authenticated user with assigned-only access subscribe to realtime channels for conversations they are not assigned to. Those event payloads can expose replies, internal notes, recipient addresses, assignee data and attachment download links.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed FreeScout version and compare it with the fixed release listed in the sources.
- Review which staff accounts are set to see only assigned conversations.

## Fix

- Upgrade FreeScout to `1.8.226` or later.

## Timeline

- 2026-11-06T17:43:14+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-62852

## Documents

- [advisory] Vendor advisory: github.com https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-w668-wq26-6c94
- [fix] Patch: github.com https://github.com/freescout-help-desk/freescout/commit/e47a54a5af6c57181ef99711326f5886e940b776
- [fix] Release notes: github.com https://github.com/freescout-help-desk/freescout/releases/tag/1.8.226

## From the sources

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.226, RealtimeConvNewThread checks only general mailbox access and does not apply the conversation-level restriction for users configured to see only assigned conversations. A restricted authenticated user can subscribe to predictable conv.<conversation_id> Polycast channels for other conversations in the same mailbox. New event payloads can expose complete replies, internal notes, recipient addresses, conversation state, assignee data, attachment names, and attachment URLs containing valid download tokens. This issue is fixed in version 1.8.226.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_