CVE-2026-103985

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.231

Description The profile form exposes the only assigned tickets permission to non-administrator owners. The UsersController::profileSave() function allows the addition or removal of User::PERM ONLY ASSIGNED TICKETS without verifying if the editor has administrator privileges. Consequently, a restricted agent can remove administrator-imposed restrictions by unchecking the option or submitting a profile save that omits it, enabling them to read and modify conversations assigned to other agents within any mailbox they are members of.

Recommendations Update to version 1.8.231.