CVE-2026-103985
7.1 HIGHpublic exploit availablePublished 2026-11-06 · Updated 2026-11-06
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.231, the profile form exposes the only_assigned_tickets permission to its non-admin owner, and UsersController::profileSave() adds or removes User::PERM_ONLY_ASSIGNED_TICKETS without checking that the editor is an administrator. A restricted agent can uncheck the option, or submit an ordinary profile save that omits it, to remove the administrator-imposed restriction. The agent can then read and modify conversations assigned to other agents in every mailbox they already belong to. This issue is fixed in version 1.8.231.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Weaknesses
CWE-269, CWE-284
Public exploit & PoC references
- https://github.com/freescout-help-desk/freescout/commit/83030464eec3c03712ad988b81f069b372c45399
- https://github.com/freescout-help-desk/freescout/releases/tag/1.8.231
- https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-m4hc-rc98-38jc
- https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-m4hc-rc98-38jc
All references
- https://github.com/freescout-help-desk/freescout/commit/83030464eec3c03712ad988b81f069b372c45399
- https://github.com/freescout-help-desk/freescout/releases/tag/1.8.231
- https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-m4hc-rc98-38jc
- https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-m4hc-rc98-38jc
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-107510
- UNSCOREDCVE-2026-88817
- MEDIUMCVE-2013-10077PoC
- HIGHCVE-2020-9709
- MEDIUMCVE-2023-54412PoC
- CRITICALCVE-2024-34320
- HIGHCVE-2024-58390PoC
- HIGHCVE-2025-11229
Related by shared AI tags and CWE weakness class. Browse the full archive.