CVE-2026-53594: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in freescout-help-desk freescout
FreeScout versions prior to 1.8.224 contain a path traversal vulnerability in the App Logs feature. This flaw allows an attacker with access to the App Logs route and the ability to forge a valid Laravel-encrypted parameter to download arbitrary files readable by the PHP process, bypassing intended directory restrictions. The vulnerability is fixed in version 1.8.224.
AI Analysis
Technical Summary
CVE-2026-53594 is a path traversal vulnerability (CWE-22) in FreeScout's App Logs feature. The vulnerability arises because the path resolution logic accepts any existing absolute path before enforcing the intended restriction to the storage/logs directory. An attacker who can access the App Logs route and forge a valid Laravel-encrypted 'dl' parameter can exploit this to download arbitrary server-local files readable by the PHP process. The issue is resolved in FreeScout version 1.8.224.
Potential Impact
An attacker with high privileges (PR:H) and access to the App Logs route can read arbitrary files on the server that are accessible to the PHP process. This can lead to disclosure of sensitive information. The vulnerability does not allow code execution or denial of service. The CVSS 3.1 base score is 4.9 (medium severity), reflecting network attack vector, low attack complexity, and high confidentiality impact.
Mitigation Recommendations
A fix is available in FreeScout version 1.8.224. Users should upgrade to version 1.8.224 or later to remediate this vulnerability. No other official remediation or temporary fixes are documented. Patch status is not explicitly stated beyond the fix in 1.8.224; users should consult the vendor advisory for the latest guidance.
CVE-2026-53594: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in freescout-help-desk freescout
Description
FreeScout versions prior to 1.8.224 contain a path traversal vulnerability in the App Logs feature. This flaw allows an attacker with access to the App Logs route and the ability to forge a valid Laravel-encrypted parameter to download arbitrary files readable by the PHP process, bypassing intended directory restrictions. The vulnerability is fixed in version 1.8.224.
CVSS v3.1
Score 4.9medium
Affected software
pkg:github/freescout-help-desk/freescoutRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-53594 is a path traversal vulnerability (CWE-22) in FreeScout's App Logs feature. The vulnerability arises because the path resolution logic accepts any existing absolute path before enforcing the intended restriction to the storage/logs directory. An attacker who can access the App Logs route and forge a valid Laravel-encrypted 'dl' parameter can exploit this to download arbitrary server-local files readable by the PHP process. The issue is resolved in FreeScout version 1.8.224.
Potential Impact
An attacker with high privileges (PR:H) and access to the App Logs route can read arbitrary files on the server that are accessible to the PHP process. This can lead to disclosure of sensitive information. The vulnerability does not allow code execution or denial of service. The CVSS 3.1 base score is 4.9 (medium severity), reflecting network attack vector, low attack complexity, and high confidentiality impact.
Mitigation Recommendations
A fix is available in FreeScout version 1.8.224. Users should upgrade to version 1.8.224 or later to remediate this vulnerability. No other official remediation or temporary fixes are documented. Patch status is not explicitly stated beyond the fix in 1.8.224; users should consult the vendor advisory for the latest guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-09T19:39:52.403Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a5e84a62a4a8d5989af56f6
Added to database: 07/20/2026, 20:27:18 UTC
Last enriched: 07/20/2026, 20:42:08 UTC
Last updated: 07/21/2026, 05:44:09 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.