Privilege Escalation Vulnerability in Kiteworks by Kiteworks

CVE-2026-102113

What is CVE-2026-102113?

A privilege escalation vulnerability exists in Kiteworks, allowing an attacker with code execution as an unprivileged backend service account to escalate privileges to root. This occurs due to inadequate handling of a filesystem path by a privileged routine, which the lower-privileged account can influence. Consequently, an attacker can execute arbitrary commands with root privileges. Exploitation requires that the attacker already has local access to the service account, making it crucial for organizations to address this issue promptly.

References