The vulnerability exists in the thread editing policy of FreeScout, a PHP‑based help desk system. It allows a user who once had the PERM_EDIT_CONVERSATIONS permission to edit a thread’s body even after the user has been removed from the mailbox that owns the conversation. The policy failure is due to an absent check for current mailbox membership; only authorship and a global permission flag are examined. This means an attacker with a legitimate editing privilege can modify existing discussions, potentially corrupting information or injecting false content in a thread that should no longer be modifiable.

Vulnerable releases of the FreeScout help‑desk and shared‑inbox platform prior to 1.8.221 are affected. The issue was identified in the "freescout-help-desk:freescout" product line.

The CVSS rating of 4.3 places the flaw in the medium range, and there is no EPSS data available. It is not listed in the CISA KEV catalog, indicating no known widespread exploitation. The attacker must already possess the PERM_EDIT_CONVERSATIONS permission, which is a privileged account; thus the exploitation requires an account with this permission and the ability to point the edit request at a thread whose mailbox membership has been revoked. The flaw does not enable remote code execution or elevate to system‑wide privileges.