CVE-2026-102113

Summary

This vulnerability allows an attacker with code execution privileges on a backend service account to escalate to root, enabling them to run arbitrary commands with the highest system privileges.

Exploitability

Exploitation requires existing local access to the service account and manipulation of a filesystem path, making it moderately difficult.

Blast radius

If exploited, the attacker could gain full control over the system, leading to potential data loss, system compromise, and unauthorized access to sensitive information.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the latest version of Kiteworks, or apply the vendor's recommended patch (e.g., 'Upgrade to 2.590 or later').

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.