CVE-2026-102093 — Kiteworks Core improper privilege management
Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could allow an authentic…
Published: 2026-09-30 · CVSS: 7.2 · CVSS 3.1
Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could allow an authenticated administrative user with limited, non-Sysadmin role-management permissions to elevate another user to full system-administrator privileges beyond those the administrative user was authorized to grant.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7