{"id":"CVE-2026-85744","kind":"vulnerability","aliases":["CVE-2026-85744"],"related":[],"title":"FreeScout: authenticated agent can merge into mailboxes they cannot access","description":"FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.227, the conversation_merge action records a failed authorization check for the target conversation in response['msg'] and then clears that value inside the source-conversation loop. An authenticated agent can merge a conversation they control into a target conversation in a mailbox they cannot access. The operation injects threads, attachments, and audit records into the unauthorized target and deletes the source conversation, but it does not disclose the target's existing contents. This issue is fixed in version 1.8.227.","summary":"FreeScout is a self-hosted help desk; a logged-in agent can merge a conversation they control into a conversation in a mailbox they lack access to. The merge injects threads and attachments into the target and deletes the source, but does not reveal the target's existing contents.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["freescout","help-desk","package","self-hosted"],"not_affected_if":["managed-hosting","no-untrusted-agents","single-mailbox"],"how_to_check":"- Check the installed FreeScout version against the fixed release `1.8.227`.\n- Confirm whether agents can access mailboxes beyond their assignments.","fix":"- FreeScout: upgrade to `1.8.227` or later.","status":"open","published_at":"2026-11-06T17:20:02+00:00","first_seen_at":"2026-11-06T17:43:14+00:00","triaged_at":"2026-11-06T17:45:22+00:00","updated_at":"2026-11-06T17:45:22+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-11-06T17:45:22Z","model":"claude-haiku-5-5","output":{"fix":"- FreeScout: upgrade to `1.8.227` or later.","reach":"network","title":"FreeScout: authenticated agent can merge into mailboxes they cannot access","impact":"medium","summary":"FreeScout is a self-hosted help desk; a logged-in agent can merge a conversation they control into a conversation in a mailbox they lack access to. The merge injects threads and attachments into the target and deletes the source, but does not reveal the target's existing contents.","audience":"businesses","category":"package","nicknames":[],"who_cares":["freescout","self-hosted","help-desk"],"confidence":0.8,"fix_status":"available","needs_auth":"yes","worst_case":"Attacker injects threads and attachments into an inaccessible mailbox conversation","analyst_note":"","how_to_check":"- Check the installed FreeScout version against the fixed release `1.8.227`.\n- Confirm whether agents can access mailboxes beyond their assignments.","plain_action":"","needs_analyst":false,"not_affected_if":["managed-hosting","single-mailbox","no-untrusted-agents"],"who_is_affected":"Teams running a self-hosted FreeScout instance where agent accounts exist and mailboxes have restricted access. Exposure requires an authenticated agent account; hosted or single-user installs without multiple agents are less exposed. unknown for exact configuration conditions beyond this.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000693,"input_tokens":4331,"output_tokens":520,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-85744':13A,16A '1.8.227':89C,169C 'access':10A,52B,135C 'action':93C 'agent':3A,37B,119C 'attach':59B,140C 'audit':142C 'authent':2A,118C 'author':97C 'cannot':9A,134C 'check':98C 'clear':108C 'content':75B,162C 'control':43B,125C 'convers':41B,46B,91C,102C,115C,123C,129C,152C 'cve':11A,14A 'delet':64B,149C 'desk':20B,32B,83C 'disclos':157C 'exist':74B,161C 'fail':96C 'fix':166C 'freescout':1A,17B,25B,76C 'help':19B,31B,82C 'help-desk':18B 'host':24B,30B,81C 'inject':56B,138C 'insid':111C 'issu':164C 'lack':51B 'log':35B 'logged-in':34B 'loop':116C 'mailbox':7A,49B,86C,132C 'merg':5A,39B,55B,92C,121C 'msg':105C 'oper':137C 'packag':21B 'prior':87C 'record':94C,143C 'respons':104C 'reveal':70B 'self':23B,29B,80C 'self-host':22B,28B,79C 'share':85C 'sourc':66B,114C,151C 'source-convers':113C 'target':62B,72B,101C,128C,147C,159C 'thread':57B,139C 'unauthor':146C 'valu':110C 'version':168C","nicknames":[],"mitigations":[],"who_affected":"Teams running a self-hosted FreeScout instance where agent accounts exist and mailboxes have restricted access. Exposure requires an authenticated agent account; hosted or single-user installs without multiple agents are less exposed. unknown for exact configuration conditions beyond this.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["freescout","helpdesk","medium","package","selfhosted"],"campaign_type":null,"search_a":"'-2026':12A,15A '-85744':13A,16A 'access':10A 'agent':3A 'authent':2A 'cannot':9A 'cve':11A,14A 'freescout':1A 'mailbox':7A 'merg':5A","search_b":"'access':52B 'agent':37B 'attach':59B 'content':75B 'control':43B 'convers':41B,46B 'delet':64B 'desk':20B,32B 'exist':74B 'freescout':17B,25B 'help':19B,31B 'help-desk':18B 'host':24B,30B 'inject':56B 'lack':51B 'log':35B 'logged-in':34B 'mailbox':49B 'merg':39B,55B 'packag':21B 'reveal':70B 'self':23B,29B 'self-host':22B,28B 'sourc':66B 'target':62B,72B 'thread':57B","search_c":"'1.8.227':89C,169C 'access':135C 'action':93C 'agent':119C 'attach':140C 'audit':142C 'authent':118C 'author':97C 'cannot':134C 'check':98C 'clear':108C 'content':162C 'control':125C 'convers':91C,102C,115C,123C,129C,152C 'delet':149C 'desk':83C 'disclos':157C 'exist':161C 'fail':96C 'fix':166C 'freescout':76C 'help':82C 'host':81C 'inject':138C 'insid':111C 'issu':164C 'loop':116C 'mailbox':86C,132C 'merg':92C,121C 'msg':105C 'oper':137C 'prior':87C 'record':94C,143C 'respons':104C 'self':80C 'self-host':79C 'share':85C 'sourc':114C,151C 'source-convers':113C 'target':101C,128C,147C,159C 'thread':139C 'unauthor':146C 'valu':110C 'version':168C","first_public_at":"2026-08-14T13:35:50+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss_by":"security-advisories@github.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-85744","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85744","severity":null,"published_at":"2026-11-06T17:20:02+00:00","modified_at":"2026-11-06T17:20:02+00:00","first_seen_at":"2026-11-06T17:43:14+00:00","fetched_at":"2026-11-06T17:43:14+00:00","note":null}],"documents":[{"id":88405,"url":"https://github.com/freescout-help-desk/freescout/commit/7c485c96bef7188c276906200250ce9d8a2bdfeb","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":88406,"url":"https://github.com/freescout-help-desk/freescout/releases/tag/1.8.227","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":88407,"url":"https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-v8vc-cmf9-gg2c","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-08-14T13:35:50+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}