CVE-2026-41193: FreeScout has Zip Slip path traversal in module installation that allows arbitrary file write leading to RCE

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-21 · updated 2026-06-17
Weakness: CWE-22

Description

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, FreeScout's module installation feature extracts ZIP archives without validating file paths, allowing an authenticated admin to write files arbitrarily on the server filesystem via a specially crafted ZIP. Version 1.8.215 fixes the vulnerability.

Affected products

freescout-help-desk freescout: before 1.8.215

References

https://github.com/freescout-help-desk/freescout/commit/14f17a5cd22d217103a72b431b47b1f06996227b
https://github.com/freescout-help-desk/freescout/releases/tag/1.8.215
https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-r85m-5mc9-cc9w
https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-r85m-5mc9-cc9w

Get alerted when CVE-2026-41193 or the next vulnerability affects your stack