← Back to search

CVE-2026-102125

8.8 HIGHpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI risk analysis

Summary
This flaw allows code running within a sandbox to escape its confinement, potentially enabling an attacker to read, modify, or disrupt the service with the privileges of the service account.
Exploitability
Exploitation requires access to the sandboxed environment and the ability to execute code within it. Precondition is the presence of a vulnerability in the sandbox isolation mechanism.
Blast radius
If exploited, the attacker could read or modify application data and configuration, or disrupt the service, impacting the availability and integrity of the affected appliance.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Disable the affected feature or upgrade to the specific version mentioned in the advisory, e.g., 'Upgrade to 2.590 or later'.
rceconfine-bypassservice-disruptionisolation-failure

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could allow an attacker in that position to read or modify application data and configuration, or to disrupt the service on the affected appliance.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-653, CWE-668

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.