Cluster Management Vulnerability in Kiteworks Core
CVE-2026-102141

6.7MEDIUM

Key Information:

Vendor

Kiteworks

Status
Core
Vendor
CVE Published:
30 September 2026

What is CVE-2026-102141?

A flaw exists in the Kiteworks Core related to the management of cluster operations, where inadequate validation of file paths can lead to serious security issues. An attacker with root access on one node may exploit this vulnerability to write and execute files on another node within the cluster. This severe issue emphasizes the importance of maintaining robust security measures and promptly applying software patches to vulnerable nodes.

Affected Version(s)

Core 0 < 9.5.1

Core 9.5.1

References

https://github.com/kiteworks/security-advisories/security...
https://raw.githubusercontent.com/cisagov/CSAF/develop/cs...
third-party-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Supr4s, https://yeswehack.com/hunters/supr4s
wlayzz, https://yeswehack.com/hunters/wlayzz
Icare, https://yeswehack.com/hunters/icare
truff, https://yeswehack.com/hunters/truff
.