PT-2025-48362 · Kiteworks · Kiteworks

Published 2025-11-29 · Updated 2025-11-29 · CVE-2025-53939

Positive Technologies · (AI Summary)

CVSS v3.1

6.3

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Kiteworks versions prior to 9.1.0

Description Kiteworks is a private data network. Before version 9.1.0, insufficient input validation during the management of shared folder roles could result in unintended privilege escalation for other users on the share.

Recommendations Update to version 9.1.0 or later.

Fix

LPE

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-53939

Affected Products

Kiteworks

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-53939 · Security Note
• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-hpf5-6376-2565 · Note
• https://twitter.com/VulmonFeeds/status/1994615760593850831 · Twitter Post