A Kiteworks Email Protection Gateway administrative service allows a password check to be bypassed, exposing sensitive administrator functions to attackers who can reference an existing administrator account. An adversary can create, modify, or delete internal users and managed domains, alter security-feature configurations, and even remove entire domains, which deletes associated user accounts and can lock out legitimate administrators. This vulnerability can lead to broad compromises of confidentiality, integrity, and availability within the gateway.

Kiteworks Email Protection Gateway, administrative service. No specific version information is disclosed as of now.

The CVSS score of 9.1 indicates high severity, and while the EPSS score is not available, the lack of listing in the CISA KEV catalog suggests that active exploitation may not yet be widespread. Nonetheless, the vulnerability can be leveraged by anyone who knows or can guess a valid administrator account reference, likely via internet-facing or internal administrative interfaces. Given the high impact on privileged functions, the risk remains significant.