CVE-2026-102141

Name of the Vulnerable Software and Affected Versions Kiteworks Core (affected versions not specified)

Description Two cluster-management operations fail to validate supplied file paths. This allows an attacker with root access on one cluster node to write files as root onto another node and trigger their execution. Successful exploitation requires backend root access on a cluster node and a pending software patch on the target node.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.