CVE-2026-102132

Name of the Vulnerable Software and Affected Versions Kiteworks Core (affected versions not specified)

Description An administrative import function fails to verify if the requesting administrator has the necessary permissions to create the privileged integration credential being imported. This allows a delegated administrator with limited permissions to escalate their privileges to full system administrator status without requiring action from an existing system administrator.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.