CVE-2026-41905
Last modified
CVE-2026-41905 is a high-severity vulnerability rated 7.7/10 on the CVSS scale. FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, Helper::sanitizeRemoteUrl() in app/Misc/Helper.php follows HTTP redirects via curlGetLastRedirectedUrl() but then re-validates the original URL instead of the final redirect destination. EPSS estimates a 0.21% chance of exploitation in the next 30 days.
Description
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, Helper::sanitizeRemoteUrl() in app/Misc/Helper.php follows HTTP redirects via curlGetLastRedirectedUrl() but then re-validates the original URL instead of the final redirect destination. An attacker who can supply any URL that passes the initial host check can redirect FreeScout to internal HTTP services (cloud metadata, internal APIs, RFC1918 ranges) that would normally be blocked. This issue has been patched in version 1.8.217.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-41905?
How severe is CVE-2026-41905?
How do I fix CVE-2026-41905?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-4190A vulnerability was detected in JawherKl node-api-postgres u…7.3
- CVE-2026-41900OpenLearnX is an open-source, decentralized learning and ass…10
- CVE-2026-41901Thymeleaf is a server-side Java template engine for web and …9
- CVE-2026-41902FreeScout is a free help desk and shared inbox built with PH…9.1
- CVE-2026-41903FreeScout is a free help desk and shared inbox built with PH…5.4
- CVE-2026-41904FreeScout is a free help desk and shared inbox built with PH…7.6
- CVE-2026-41906FreeScout is a free help desk and shared inbox built with PH…7.1
- CVE-2026-41907uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs…7.5
- CVE-2026-41908OpenClaw before 2026.4.20 contains a scope enforcement bypas…6.5
- CVE-2026-41909OpenClaw before 2026.4.20 contains an improper authorization…5.4
- CVE-2026-4191A flaw has been found in JawherKl node-api-postgres up to 2.…7.3
- CVE-2026-41910OpenClaw before 2026.4.8 omits owner-only enforcement for cr…4.3
Are you affected by CVE-2026-41905?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST