CVE-2026-41192
FreeScout is a free self-hosted help desk and shared mailbox.
Published Apr 21, 2026 · updated Jun 17, 2026
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, the reply and draft flows trust client-supplied encrypted attachment IDs. Any IDs present in but omitted from retained lists are decrypted and passed directly to . Because returns encrypted IDs for attachments on a visible conversation, a mailbox peer can replay those IDs through and delete the original attachment row and file. Version 1.8.215 fixes the vulnerability.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Apr 21, 2026 · NIST NVD
Detected
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, the reply and draft flows trust client-supplied encrypted attachment IDs. Any IDs present in but omitted from retained lists are decrypted and passed directly to . Because returns encrypted IDs for attachments on a visible conversation, a mailbox peer can replay those IDs through and delete the original attachm
Jun 17, 2026 · NIST NVD
Updated
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, the reply and draft flows trust client-supplied encrypted attachment IDs. Any IDs present in but omitted from retained lists are decrypted and passed directly to . Because returns encrypted IDs for attachments on a visible conversation, a mailbox peer can replay those IDs through and delete the original attachm
Sources
- CVE.orgVulnerability recordCVE-2026-41192
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-41192
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, the reply and draft flows trust client-supplied encrypted attachment IDs. Any IDs present in but omitted from retained lists are decrypted and passed directly to `Attachmen
nvd.nist.gov