A critical-severity FreeScout vulnerability can be exploited for remote code execution without authentication or user interaction.