Skip to content
OpenAdvisories
High · 7.1 CVE-2025-53896 EUVD-2025-199898

Kiteworks MFT is vulnerable to Insufficient Session Expiration

Published Nov 29, 2025 · Updated Dec 3, 2025 · Assigned by GitHub_M

Description

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0.

Affected products

VendorProductAffectedFixed
kiteworks security-advisories < 9.1.0 —

References