CVE-2025-53939 — Kiteworks Core is vulnerable to Improper Input Validation

CVE-2025-53939

Kiteworks Core is vulnerable to Improper Input Validation PUBLISHED

Description (CNA)

Kiteworks is a private data network (PDN). Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0.

Affected (CNA)

Vendor / product	Versions
kiteworks / security-advisories	affected < 9.1.0

CWE

CWE-20

References

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-hpf5-6376-2565

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.