diff --git a/SECURITY.md b/SECURITY.md
index ad00d3fa..5d59e844 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -13,4 +13,5 @@ Read about **[FreeScout's Security](https://freescout.net/security/)**.
   * CVEs are requested after the fix for the vulnerability is released.
   * If you found an issue related to the `APP_LIMIT_USER_CUSTOMER_VISIBILITY=true` mode, make sure to read the [FAQ](https://github.com/freescout-help-desk/freescout/wiki/FAQ#is-it-possible-to-have-separate-contactscustomers-per-mailbox).
   * Support agents are allowed to move conversations to any mailbox, even to ones they don't have access to.
+  * Drafts are viewable/discardable by any member of the mailbox where they are created.
   * FreeScout loads external images in received emails, and there is a Module allowing to disable loading external images: https://freescout.net/module/block-external-images/.
\ No newline at end of file