CVE-2026-102141

Received Received - Intake

Kiteworks Core Cluster File Path Validation Flaw

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government

Description

Two Kiteworks Core cluster-management operations did not validate file paths supplied to them, so an attacker holding root on one node of a cluster could write files as root onto another node and cause them to be executed there. Exploitation requires backend root access on a cluster node and a pending software patch present on the target node.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-30

Last Modified

2026-09-30

Generated

2026-10-01

AI Q&A

2026-10-01

EPSS Evaluated

N/A

NVD

CVE-2026-102141

EUVD

EUVD-2026-90273

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-73	The product allows user input to control or influence paths or file names that are used in filesystem operations.
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability involves two Kiteworks Core cluster-management operations that failed to validate file paths. An attacker with root access on one cluster node could exploit this to write and execute files as root on another node. Exploitation requires backend root access on a cluster node and a pending software patch on the target node.

Detection Guidance

Detection requires checking for unauthorized file writes or executions across cluster nodes. Since exploitation requires root access on a node and a pending patch, monitor for suspicious file operations in system logs or unexpected processes. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain control over additional nodes in a cluster, potentially leading to full system compromise. This could result in unauthorized access, data theft, or disruption of services.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations may face legal penalties, reputational damage, and loss of trust due to non-compliance resulting from such security incidents.

Mitigation Strategies

Apply the pending software patch to all cluster nodes immediately to prevent exploitation. Ensure backend root access is restricted and monitored on all nodes.

Hi! I’m here to help you understand CVE-2026-102141. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70