Auth bypass in Freescout-help-desk Freescout
CVE-2026-40570
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, the `load_customer_info` action in `POST /conversation/ajax` returns complete customer profile data to any authenticated user without verifying mailbox…
Vulnerability class: IDOR (Insecure Direct Object Reference)
EPSS: 0.002 (16.1th percentile) — read the EPSS interpretation.
Affected products
- Freescout-help-desk Freescout — versions < 1.8.213
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)