# CVE-2026-85744: FreeScout authorization bypass in conversation merge

Source: https://junglewise.ai/threats/cve-2026-85744-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-06. Updated: 2026-11-06  
License: CC BY 4.0 with a link back

CVE-2026-85744 · Severity: medium · CVSS 5.4 · Published 2026-11-06

FreeScout is a self-hosted help desk system that manages customer conversations and mailboxes. A flaw in the conversation merge feature allows an authenticated agent to inject messages and attachments into mailboxes they do not have permission to access, effectively gaining control over unauthorized conversations. While the agent cannot read existing content in the target mailbox, they can add data to it and remove evidence from their own conversations.

Technologies: [FreeScout](https://junglewise.ai/threats/technologies/freescout-freescout). Vendors: [FreeScout](https://junglewise.ai/threats/vendors/freescout).

## Quick answers

**Is CVE-2026-85744 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85744 being exploited in the wild.

**How severe is CVE-2026-85744?** Medium severity, with a CVSS score of 5.4, published 6 November 2026.

**Which products and versions are affected?** FreeScout prior to 1.8.227.

**Is there a fix for CVE-2026-85744?** Yes: fixed in 1.8.227. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-85744 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-85744?** Check whether you run FreeScout at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 1.8.227

## Technical details

The conversation_merge action fails to properly validate authorization for the target conversation; it records the permission denial in response['msg'] but then clears that flag inside the source-conversation loop before the merge proceeds. An authenticated agent can merge a conversation they control into a target mailbox they cannot access, injecting threads, attachments, and audit records into the unauthorized target while deleting the source. The vulnerability was fixed by adding a check to prevent the merge if any authorization error has been set.

## Affected products

- FreeScout FreeScout prior to 1.8.227

## Timeline

- 2026-11-06: disclosed
- 2026-07-04: patched

## References

- [https://github.com/freescout-help-desk/freescout/commit/7c485c96bef7188c276906200250ce9d8a2bdfeb](https://github.com/freescout-help-desk/freescout/commit/7c485c96bef7188c276906200250ce9d8a2bdfeb)
- [https://github.com/freescout-help-desk/freescout/releases/tag/1.8.227](https://github.com/freescout-help-desk/freescout/releases/tag/1.8.227)

## Related threats

- [FreeScout stored XSS in job details page](https://junglewise.ai/threats/cve-2026-85742-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to)
- [FreeScout SSRF in remote download and port check](https://junglewise.ai/threats/cve-2026-85743-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to)
- [FreeScout SQL injection in polycast receive endpoint](https://junglewise.ai/threats/cve-2026-62856-freescout-is-a-self-hosted-help-desk-and-shared-mailbox)
- [FreeScout path traversal in App Logs viewer](https://junglewise.ai/threats/cve-2026-62855-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to)
- [FreeScout stored XSS in mailbox signature via nested tag bypass](https://junglewise.ai/threats/cve-2026-62854-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to)