CVE-2026-102093

Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.0

Description Improper Privilege Management occurs because the software does not correctly enforce restrictions on role assignment. This allows an authenticated administrative user with limited, non-Sysadmin role-management permissions to elevate another user to full system-administrator privileges, exceeding the permissions the administrative user was authorized to grant.

Recommendations Update Kiteworks Core to version 9.5.0 or later.