Privilege Escalation Vulnerability in Kiteworks

CVE-2026-102120

What is CVE-2026-102120?

A privilege escalation vulnerability exists within the Kiteworks platform that allows an attacker, who has already gained code execution on one node within a clustered environment, to escalate their privileges. This can result in the execution of operating system commands on another node within the same cluster. The root cause stems from inadequate input validation within an internal cluster management function, which permits attacker-controlled values to escalate their execution privileges. However, it is important to note that exploitation of this vulnerability necessitates prior access to one of the cluster nodes, making it inaccessible from external sources.

References