Technical impact
Kiteworks Core fails to properly validate a parameter in its password reset workflow, enabling an unauthenticated attacker who knows a user's email address to reset that user's password without accessing the emailed reset link. The attacker can then authenticate as the victim, potentially including users with administrative privileges, leading to full account takeover.
Affected Systems
The vulnerability affects Kiteworks Core, a product of Kiteworks. No specific version information is provided in the CNA data; administrators should verify the version of Kiteworks Core in use and apply any available patches.
Risk and Exploitability
The CVSS score of 9.8 indicates a critical severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, but the authentication bypass itself is a high‑impact vector. Based on the description, the likely attack vector is a web request to the password reset endpoint that accepts the missing validation. The attacker must know a valid user email, which is often publicly discoverable. Given the high CVSS and the straightforward exploitation path, the risk remains substantial.
