CVE-2026-48812 HIGH

CVE-2026-48812: FreeScout Allows Unauthenticated Access to Legacy Attachment Files

Vendor Freescout-Help-Desk
Product freescout
Weakness CWE-287 · Improper authentication
Published July 20, 2026
Last update July 20, 2026
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.221, FreeScout's attachment download route skips token authentication for any attachment whose `token_type` is set to `1` (`TOKEN_TYPE_LEGACY`). Because this route is unauthenticated and the file path is deterministic, an unauthenticated remote attacker can download any attachment that was created by an older version of FreeScout without possessing a valid token or session. Version 1.8.221 contains a fix.

Key dates

02Disclosure timeline

July 20, 2026 CVE published

Related vulnerabilities

04Related CVE

CVE-2020-36832 Indeed Membership Pro 7.3 - 8.6 - Authentication Bypass CVE-2023-51477 WordPress BuddyBoss Theme theme <= 2.4.60 - Unauth. Arbitrary WordPress Settings Change vulnerability CVE-2023-51478 WordPress Build App Online plugin <= 1.0.19 - Unauthenticated Account Takeover vulnerability CVE-2025-14002 WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP CVE-2023-48747 WordPress Booster for WooCommerce plugin <= 7.1.2 - Authenticated Production Creation/Modification Vulnerability