Privilege Escalation in Kiteworks Core by Unauthorized Administrators

CVE-2026-102132

What is CVE-2026-102132?

In Kiteworks Core, an administrative import function is susceptible to a privilege escalation flaw that allows a delegated administrator with limited permissions to import privileged integration credentials without verification. This flaw enables unauthorized administrators to gain full system administrator privileges effortlessly, posing a significant security risk. Organizations using Kiteworks Core should address this issue promptly to prevent unauthorized access and potential system compromise.

References