CVE-2026-102129

Name of the Vulnerable Software and Affected Versions Kiteworks Core (affected versions not specified)

Description A user-provisioning interface fails to verify if the requesting administrator has the necessary authorization to grant the specific role being assigned. This allows an administrator with delegated permissions limited to role changes to escalate an account to full system-administrator privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.