A vulnerability classified as critical has been found in freescout-help-desk freescout up to 1.8.214. Impacted is the function
ThreadPolicy::edit. Performing a manipulation results in incorrect authorization.
This vulnerability is cataloged as CVE-2026-41189. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
