---
id: "CVE-2026-85744"
page: "https://infrastack.ai/live/CVE-2026-85744"
kind: "vulnerability"
aliases: ["CVE-2026-85744"]
title: "FreeScout: authenticated agent can merge into mailboxes they cannot access"
severity: "medium"
cvss: 5.4
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["freescout", "help-desk", "package", "self-hosted"]
not_affected_if: ["managed-hosting", "no-untrusted-agents", "single-mailbox"]
published_at: "2026-11-06T17:20:02+00:00"
first_seen_at: "2026-11-06T17:43:14+00:00"
updated_at: "2026-11-06T17:45:22+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85744", "first_seen_at": "2026-11-06T17:43:14+00:00"}]
exploit_sources: []
---

# FreeScout: authenticated agent can merge into mailboxes they cannot access

Link for people: https://infrastack.ai/live/CVE-2026-85744 (this .md is for agents)

FreeScout is a self-hosted help desk; a logged-in agent can merge a conversation they control into a conversation in a mailbox they lack access to. The merge injects threads and attachments into the target and deletes the source, but does not reveal the target's existing contents.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed FreeScout version against the fixed release `1.8.227`.
- Confirm whether agents can access mailboxes beyond their assignments.

## Fix

- FreeScout: upgrade to `1.8.227` or later.

## Timeline

- 2026-11-06T17:43:14+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-85744

## Documents

- [advisory] Vendor advisory: github.com https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-v8vc-cmf9-gg2c
- [fix] Patch: github.com https://github.com/freescout-help-desk/freescout/commit/7c485c96bef7188c276906200250ce9d8a2bdfeb
- [fix] Release notes: github.com https://github.com/freescout-help-desk/freescout/releases/tag/1.8.227

## From the sources

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.227, the conversation_merge action records a failed authorization check for the target conversation in response['msg'] and then clears that value inside the source-conversation loop. An authenticated agent can merge a conversation they control into a target conversation in a mailbox they cannot access. The operation injects threads, attachments, and audit records into the unauthorized target and deletes the source conversation, but it does not disclose the target's existing contents. This issue is fixed in version 1.8.227.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_