CVE-2026-41193: critical vulnerability in freescout-help-desk freescout
FreeScout has Zip Slip path traversal in module installation that allows arbitrary file write leading to RCE
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
FreeScout's module installer doesn't check if files in ZIP archives try to escape their intended folder, letting admin users write files anywhere on the server and potentially run malicious code.
CWE-22 path traversal in ZIP extraction during module installation allows authenticated administrators to write arbitrary files to the filesystem via crafted archive entries, enabling remote code execution. The vulnerability exists due to insufficient validation of extracted file paths before writing to disk.
In the same product, most dangerous first.