Description
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protection Gateway allowed an authenticated administrator to import configuration whose contents were not sufficiently validated before being processed. A crafted submission could potentially allow arbitrary commands to be executed on the affected gateway.
Published: 2026-09-30
Score: 7.2 High
EPSS: 1.0% Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

An authenticated administrator can import configuration data that is not validated correctly, allowing execution of arbitrary commands on the gateway. The flaw exploits unsafe path handling (CWE-22) and code injection (CWE-94), which can lead to full compromise of the gateway and potentially connected services.

Affected Systems

The vulnerability affects Kiteworks Email Protection Gateway installations older than version 9.5.0. No other vendors or product lines are listed as impacted.

Risk and Exploitability

With a CVSS score of 7.2 the risk is considered high. The EPSS score is 1%, and the vulnerability is not listed in CISA's KEV catalog, indicating no publicly known exploitation yet. The attack requires privileged administrator access, so the likelihood of exploitation is reduced compared to an unauthenticated vector but remains significant in environments with unrestricted admin privileges.

Generated by OpenCVE AI on October 1, 2026 at 14:48 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade or patch the gateway to version 9.5.0 or later to remove the validation flaw.
  • Restrict administrator accounts to trusted IP ranges and enable multi‑factor authentication to limit who can perform imports.
  • Disable or remove unnecessary administrative accounts and monitor import logs for suspicious configuration submissions.

Generated by OpenCVE AI on October 1, 2026 at 14:48 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 15:45:00 +0000

Type Values Removed Values Added
First Time appeared Kiteworks
Kiteworks kiteworks Email Protection Gateway
Vendors & Products Kiteworks
Kiteworks kiteworks Email Protection Gateway

Thu, 01 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Description Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protection Gateway allowed an authenticated administrator to import configuration whose contents were not sufficiently validated before being processed. A crafted submission could potentially allow arbitrary commands to be executed on the affected gateway.
Title Kiteworks Email Protection Gateway remote code execution
Weaknesses CWE-22
CWE-94
References
Metrics cvssV3_1

{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Kiteworks Kiteworks Email Protection Gateway
cve-icon MITRE

Status: PUBLISHED

Assigner: cisa-cg

Published:

Updated: 2026-10-01T13:37:08.530Z

Reserved: 2026-09-28T17:39:13.561Z

Link: CVE-2026-102097

cve-icon Vulnrichment

Updated: 2026-10-01T13:32:28.289Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T21:16:56.370

Modified: 2026-10-01T14:17:13.420

Link: CVE-2026-102097

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T15:30:08Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

  • CWE-94

    Improper Control of Generation of Code ('Code Injection')