freescout
1.8.251FreeScout — Free self-hosted omnichannel AI-powered helpdesk & shared mailbox
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- AGPL-3.0Copyleft · OSI-approved
- Security
- 30 advisories1 critical, 11 high, 16 medium, 2 low
- Supported versions
- No scheduleendoflife.date does not track this project
4.7k stars · 746 forks · 9 open issues · last release 1 day ago · data checked 2 hours ago
Security advisories
All advisories on GitHubThe 30 most recent advisories published by the maintainers: 1 critical, 11 high, 16 medium, 2 low. Check the patched version against the one you run.
- criticalGHSA-6q4w-p2f4-q8q8Nov 14, 2026FreeScout: unauthenticated helpdesk conversation hijack via the unsigned Message-ID threading fallback (customer replacement)
- Affected
- <1.8.251
- Patched in
- 1.8.251
- lowGHSA-55m5-wx6v-hf27Nov 7, 2026FreeScout v1.8.249 - Password change does not revoke pre-change web sessions (CWE-613)
- Affected
- <1.8.250
- Patched in
- 1.8.250
- highGHSA-r79h-87qg-7gr3Oct 31, 2026Forged notification-reply Message-ID lets an outside sender post and send mail as any agent
- Affected
- <1.8.249
- Patched in
- 1.8.249
- highGHSA-hmhp-3vmh-wr85Oct 31, 2026Agent without delete permission can permanently erase conversation history by merging it into a draft
- Affected
- <1.8.249
- Patched in
- 1.8.249
- mediumGHSA-3848-qr89-46r9Oct 31, 2026Raw customer HTML loaded into the New Conversation editor lets an inbound email plant a hidden Bcc on the agent's reply
- Affected
- <1.8.249
- Patched in
- 1.8.249
- mediumGHSA-7vcv-4xfj-p598Oct 31, 2026Any agent can read other users' private real-time notifications through a crafted Polycast channel name
- Affected
- <1.8.249
- Patched in
- 1.8.249
- mediumGHSA-3xfh-rcc6-75frOct 31, 2026Members of an archived mailbox can still read and rewrite its messages through the thread editor
- Affected
- <1.8.249
- Patched in
- 1.8.249
- mediumGHSA-625r-7399-m8rjOct 31, 2026Disabled agents keep posting replies by email and keep receiving notification emails
- Affected
- <1.8.249
- Patched in
- 1.8.249
- mediumGHSA-mm6p-53cp-mcx7Oct 31, 2026Path traversal in the Translations editor lets an administrator write PHP files anywhere the web user can write
- Affected
- <1.8.249
- Patched in
- 1.8.249
- highGHSA-c359-7mcr-j3xxOct 31, 2026Password reset token survives email reassignment
- Affected
- <1.8.249
- Patched in
- 1.8.249
- mediumGHSA-vcgj-6qfr-7qr6Oct 17, 2026Authenticated resource exhaustion through unbounded Polycast conversation-view cache entries
- Affected
- <1.8.248
- Patched in
- 1.8.248
- mediumGHSA-w3jr-fphw-whgvOct 17, 2026FreeScout 1.8.243 — Broken Access Control: "Previous Conversations" widget leaks subjects of conversations assigned to other agents (incomplete fix of CVE-2026-41183 / GHSA-c83g-9f2m-9cmw)
- Affected
- <1.8.248
- Patched in
- 1.8.248
- highGHSA-c8rg-2r2h-5vgcOct 17, 2026Concurrent invitation redemption creates multiple authenticated sessions
- Affected
- <1.8.248
- Patched in
- 1.8.248
- lowGHSA-qgjh-pmpj-85m6Oct 11, 2026Incomplete fix for GHSA-6w8v-qp43-vg2h: checkPort() TOCTOU enables DNS-rebinding SSRF
- Affected
- <1.8.244
- Patched in
- 1.8.244
- highGHSA-3gv6-4vmm-79pjSep 26, 2026Unauthenticated installer final page discloses .env after manual FreeScout installation
- Affected
- <1.8.241
- Patched in
- 1.8.241
- highGHSA-59v9-2qvg-cxw8Sep 26, 2026Archived mailbox member can permanently purge hidden Spam and Deleted conversations
- Affected
- <1.8.241
- Patched in
- 1.8.241
- highGHSA-6ff4-3w2c-mjj8Sep 26, 2026Draft lifecycle authorization bypass deletes existing conversation history
- Affected
- <1.8.241
- Patched in
- 1.8.241
- mediumGHSA-2j2c-g32w-96vmSep 26, 2026Delayed email notifications disclose post-revocation conversation content to former mailbox members
- Affected
- <1.8.241
- Patched in
- 1.8.241
- mediumGHSA-qp58-4g6r-qq78Sep 26, 2026State-changing conversation clone reachable via unauthenticated-CSRF GET request (CWE-352), sibling of GHSA-5vw8-4wxh-6mpr
- Affected
- <1.8.242
- Patched in
- 1.8.242
- mediumGHSA-6545-8c3f-pp6wSep 26, 2026Retained website notifications disclose current thread content after mailbox access revocation
- Affected
- <1.8.241
- Patched in
- 1.8.241
- mediumGHSA-5vw8-4wxh-6mprSep 12, 2026The undoReply action is a state-changing operation reachable via GET without CSRF protection, allowing a cross-site request to silently revert another user's sent reply to a draft and cancel its outbound mail delivery
- Affected
- <1.8.240
- Patched in
- 1.8.240
- highGHSA-v5xm-qw3f-qm98Sep 4, 2026Incomplete fix for GHSA-6w8v: SSRF guard bypassed via IPv6 transition addresses (6to4/NAT64/Teredo)
- Affected
- <1.8.239
- Patched in
- 1.8.239
- highGHSA-89ww-mfww-5vr6Sep 4, 2026Incomplete fix for CVE-2026-40496: legacy MD5 attachment tokens (`token_type=2`)
- Affected
- <1.8.239
- Patched in
- 1.8.239
- mediumGHSA-89fj-jcr7-2c68Aug 29, 2026Assigned-only visibility bypass via ThreadPolicy edit/delete on user-authored threads (incomplete GHSA-4h5p fix)
- Affected
- <1.8.235
- Patched in
- 1.8.235
- mediumGHSA-c83g-9f2m-9cmwAug 29, 2026Assigned-only conversation disclosure via conversationsFilterQuery (GHSA-7rh8 sibling)
- Affected
- <1.8.235
- Patched in
- 1.8.235
- mediumCVE-2026-107393Aug 29, 2026Stored HTML Injection in Administrator Alert Emails via Spoofed CF-Connecting-IP Header
- Affected
- <1.8.235
- Patched in
- 1.8.235
- mediumGHSA-83xx-8c27-gq78Aug 29, 2026Disabled or Revoked Agent Can Reply to Restricted Tickets Through Email
- Affected
- <1.8.235
- Patched in
- 1.8.235
- highGHSA-6mhr-m8m9-6q6hAug 29, 2026empty_folder does not check per-conversation delete permission, letting a restricted agent permanently delete conversations they cannot view
- Affected
- <1.8.236
- Patched in
- 1.8.236
- highGHSA-w36p-9vhj-x273Aug 29, 2026Non-admin PERM_EDIT_USERS agent grants a self-created account access to any mailbox via createSave (mailbox sync bypasses admin-only gate)
- Affected
- <1.8.236
- Patched in
- 1.8.236
- mediumGHSA-7x4c-p73f-67x5Aug 29, 2026[Anonymous event-payload disclosure on /polycast/receive] empty-channels early return in PolycastBroadcaster::auth authenticates nobody, receive query returns all polycast_events including private-channel payloads
- Affected
- <1.8.237
- Patched in
- 1.8.237