CVE-2026-41191

OVERVIEW FreeScout, a free self-hosted help desk and shared mailbox platform, contains a privilege escalation vulnerability in versions prior to 1.8.215. The vulnerability exists in the MailboxesController::updateSave() function, which fails to properly filter the "chat_start_new" parameter when persisting mailbox settings. This allows users with limited mailbox signature permissions to modify hidden mailbox-wide chat configuration settings through direct POST requests, bypassing UI-level access controls. SEVERITY The vulnerability carries a CVSS v3.1 score of 7.1 (HIGH) with a network attack vector, low complexity, and low privilege requirements. Authentication is required, but no user interaction is necessary for exploitation. While the impact to confidentiality is limited, the integrity impact is high, allowing unauthorized modification of mailbox-wide chat settings. The attack is easily executable by any authenticated user with minimal mailbox permissions. EXPLOITATION STATUS There is no evidence of active exploitation in the wild. The vulnerability is not listed on CISA's Known Exploited Vulnerabilities catalog and is currently inactive on security vendor hotlists. No publicly available exploit code has been disclosed. The EPSS score of 0.00025 indicates very low probability of exploitation, suggesting minimal community attention or exploitation attempts at this time.