Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-53939

Kiteworks Core is vulnerable to Improper Input Validation

Description

Kiteworks is a private data network (PDN). Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

kiteworks security-advisories

  • < 9.1.0affected

References