CVE-2022-36173: Freshworks Freshservice Agent

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

FreshService macOS Agent < 4.4.0 and FreshServce Linux Agent < 3.4.0 are vulnerable to TLS Man-in-The-Middle via the FreshAgent client and scheduled update service.

Affected products

• Freshworks Freshservice Agent: before 2.12.0 (fixed in 2.12.0); before 3.4.0 (fixed in 3.4.0); before 4.4.0 (fixed in 4.4.0)
• Freshworks Freshservice Probe: before 4.11.0 (fixed in 4.11.0)

Published 2022-09-12. Last modified 2026-06-17.