CVE-2026-102112

Received Received - Intake

Privilege Escalation in Kiteworks Appliance

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government

Description

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to that service account.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-30

Last Modified

2026-09-30

Generated

2026-10-01

AI Q&A

2026-10-01

EPSS Evaluated

N/A

NVD

CVE-2026-102112

EUVD

EUVD-2026-90307

Affected Vendors & Products

Vendor	Product	Version / Range
kiteworks	kiteworks	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This is a privilege escalation vulnerability in Kiteworks. It allows an attacker with existing code execution as an unprivileged backend service account to escalate privileges to root and run arbitrary commands with full system access. Exploitation requires the attacker to already have local access to that service account.

Detection Guidance

Detection requires verifying if an unprivileged backend service account has been compromised and if privilege escalation to root is possible. Check for unusual processes running as root, unauthorized modifications to system files, or unexpected command executions from the service account. Review logs for suspicious activity related to the service account.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain complete control over the Kiteworks appliance, potentially leading to data theft, system compromise, or further network infiltration. It requires prior local access but escalates that access to full administrative privileges.

Compliance Impact

This vulnerability could severely impact compliance by enabling unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Full system compromise may lead to data breaches, resulting in regulatory penalties and loss of trust.

Mitigation Strategies

Immediately restrict access to the unprivileged backend service account. Audit and monitor all activities performed by this account. Apply patches or updates from Kiteworks if available. Consider isolating the affected system from critical network segments until mitigation is confirmed.

Hi! I’m here to help you understand CVE-2026-102112. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70