PT-2025-48362
CVE-2025-53939
·
Published
2025-11-29
·
Updated
2026-10-07
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Kiteworks versions prior to 9.1.0
Description
Kiteworks is a private data network. Before version 9.1.0, insufficient input validation during the management of shared folder roles could result in unintended privilege escalation for other users on the share.
Recommendations
Update to version 9.1.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾