Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-53939 EUVD-2025-199894

Kiteworks Core is vulnerable to Improper Input Validation

Published Nov 29, 2025 · Updated Dec 1, 2025 · Assigned by GitHub_M

Description

Kiteworks is a private data network (PDN). Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0.

Affected products

VendorProductAffectedFixed
kiteworks security-advisories < 9.1.0 —

References