CVE-2026-102123

Name of the Vulnerable Software and Affected Versions Kiteworks appliance (affected versions not specified)

Description A setup interface fails to properly confine user-supplied file paths to the intended directory. This allows an unauthenticated attacker with network access to the interface to write files to any location accessible by the service account, which may compromise the integrity of the appliance or cause a denial of service. Access to this interface is typically limited to the initial provisioning window or occurs in non-default configurations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.