CVE-2026-102132 — Kiteworks Core Privilege Escalation through Improper Access Control
An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported.…
Published: 2026-09-30 · CVSS: 7.2 · CVSS 3.1
An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system administrator privileges, without any action by an existing system administrator.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7