CVE-2026-48810CWE-285

FreeScout: Thread Edit Authorization Bypass via Missing Mailbox Check

Medium · published May 29, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
16.0
In the wild
Unconfirmed
What it is

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, while investigating the ThreadPolicy::delete issue reported previously, the same missing mailbox membership check was found in the sibling ThreadPolicy::edit method. A user with the PERM_EDIT_CONVERSATIONS permission who created a message or internal note in Mailbox A can rewrite that thread's body after an administrator removes them from Mailbox A, because the policy checks only authorship and a global permission flag — not current mailbox membership. This vulnerability is fixed in 1.8.221.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00254 · 16.0th percentile
Weakness
CWE-285 · Improper Authorization
Published
2026-05-29T19:48Z
EPSS history
Timeline
  • 29 MAY 19:48Z
    FreeScout: Thread Edit Authorization Bypass via Missing Mailbox Check
    cvelistv5