CVE-2026-102089

Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway versions prior to 9.5.0

Description A path traversal weakness exists in an administrative import function. This flaw allows an authenticated administrator to write files to arbitrary locations on the server, which could potentially lead to arbitrary code execution on the underlying system. Path traversal is a vulnerability that allows an attacker to access files and directories that are stored outside the web root folder.

Recommendations Update Kiteworks Email Protection Gateway to version 9.5.0 or later.