← Back to search

CVE-2026-102112

7.8 HIGHpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI risk analysis

Summary
This vulnerability allows an attacker with code execution privileges on a backend service account to escalate to root and execute arbitrary commands with the highest privileges, posing a significant risk to the system's security.
Exploitability
Exploitation requires existing local access to the backend service account and is relatively straightforward given the attacker's initial foothold.
Blast radius
If exploited, the attacker could gain full control over the system, leading to potential data loss, system compromise, and unauthorized access to sensitive information.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Disable the affected backend service account or restrict access to it to prevent unauthorized code execution.
rceprivilege-escalationbackendlocal-privilege

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to that service account.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78, CWE-269

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.