A path traversal weakness exists in an optional administrative feature of the Email Protection Gateway, allowing an authenticated administrator to move files outside the intended directory. This could be employed to place malicious executables in locations where the system will run them, resulting in arbitrary code execution on the host. The flaw is identified as a file system traversal error (CWE-22).

Kiteworks Email Protection Gateway is affected. No affected version information is provided, so all installations that use the default optional administrative feature are potentially vulnerable. The issue is limited to accounts with administrative privileges to the feature.

The CVSS score of 7.2 indicates a high severity. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, but the possibility of arbitrary code execution remains a significant threat. Likely exploitation requires an authenticated attacker with administrative rights. If attackers can gain such access, they may exploit the traversal to place payloads in system directories, enabling remote code execution.