CVE-2025-53939 — Kiteworks Core is vulnerable to Improper Input Validation
Kiteworks is a private data network (PDN). Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another us…
Published: 2025-11-29 · CVSS: 6.3 · CVSS 3.1
Kiteworks is a private data network (PDN). Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7