CVE-2025-53896 — Kiteworks MFT is vulnerable to Insufficient Session Expiration

CVE-2025-53896

Kiteworks MFT is vulnerable to Insufficient Session Expiration PUBLISHED

Description (CNA)

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0.

Affected (CNA)

Vendor / product	Versions
kiteworks / security-advisories	affected < 9.1.0

CWE

CWE-613

References

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-23h2-3jj8-58hm

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.