CVE-2026-102122: Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding…

PriorityP423medium4.3CVSS 3.1

AVNACLPRLUINSUCNILAN

EPSS

0.16%

4.3th percentile

Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
kiteworks	core	< 9.5.1	9.5.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.