PT-2025-48362 · Kiteworks · Kiteworks

Published 2025-11-29 · Updated 2025-11-29 · CVE-2025-53939

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kiteworks versions prior to 9.1.0

Description Kiteworks is a private data network. Before version 9.1.0, insufficient input validation during the management of shared folder roles could result in unintended privilege escalation for other users on the share.

Recommendations Update to version 9.1.0 or later.

Exploit

Fix

LPE

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-53939

GHSA-HPF5-6376-2565

Affected Products

Kiteworks

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53939.json · Exploit
• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-hpf5-6376-2565 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-53939 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53939 · Vendor Advisory
• https://t.me/CVEtracker/38458 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1994615760593850831 · Twitter Post