Skip to content
OpenAdvisories
High · 7.8 CVE-2026-102112 EUVD-2026-90307

Kiteworks Core Local Privilege Escalation

Published Sep 30, 2026 · Updated Oct 1, 2026 · Assigned by cisa-cg

Description

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to that service account.

Affected products

VendorProductAffectedFixed
Kiteworks Core < 9.5.0 9.5.0

Advisories 3

References

  • url vendor-advisory
  • url third-party-advisory