CVE-2026-102123

Received Received - Intake

Path Traversal in Kiteworks Appliance Setup Interface

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government

Description

A Kiteworks appliance setup interface did not confine a user-supplied file path to its intended directory, which could allow an unauthenticated attacker to write a file to any location writable by the affected service account, potentially compromising the integrity of the appliance or rendering it unavailable until an operator intervenes. Exploitation requires network access to the affected interface, which is not reachable on a fully configured appliance in its default configuration; reaching it depends on either the transient window while an appliance is first being provisioned or a non-default appliance configuration.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-30

Last Modified

2026-09-30

Generated

2026-10-01

AI Q&A

2026-10-01

EPSS Evaluated

N/A

NVD

CVE-2026-102123

EUVD

EUVD-2026-90295

Affected Vendors & Products

Vendor	Product	Version / Range
kiteworks	appliance	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability involves a Kiteworks appliance setup interface that fails to restrict file paths provided by users. An unauthenticated attacker could exploit this to write files to any location accessible by the service account, potentially compromising the appliance's integrity or causing it to become unavailable until manual intervention.

Detection Guidance

Detection requires checking for unauthorized file writes or unusual file paths in directories writable by the affected service account. Monitor logs for suspicious file operations and verify file paths in the appliance setup interface. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to overwrite critical system files, install malicious software, or disrupt appliance operations. This may lead to data loss, unauthorized access, or prolonged downtime requiring operator intervention to restore functionality.

Compliance Impact

This vulnerability could lead to unauthorized file access or modification, violating data integrity and confidentiality requirements under GDPR and HIPAA. Non-compliance may result in legal penalties, reputational damage, and loss of trust in data handling practices.

Mitigation Strategies

Ensure the appliance setup interface is not accessible from external networks. Restrict network access to the interface and verify default configurations are in place. Apply patches or updates if available from the vendor.

Hi! I’m here to help you understand CVE-2026-102123. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70