The vulnerability enables an attacker who has already achieved code execution on one node of a Kiteworks clustered deployment to execute operating system commands on another node with elevated privileges. This is achieved through insufficient input validation in an internal cluster management function that allows attacker-supplied values to reach a privileged execution context. The flaw constitutes an OS command injection weakness (CWE‑78) coupled with improper privilege management (CWE‑269), giving the attacker the ability to perform arbitrary command execution with higher privileges.

This issue affects Kiteworks Core installations that run in a clustered environment. The affected function is part of the internal cluster management subsystem and is not exposed externally, meaning the vulnerability applies to all nodes that communicate with the cluster management service. No specific version numbers were provided, but the flaw applies to any deployment where the described cluster management function is active.

The CVSS score of 8.8 indicates a high severity. The EPSS is not available and the vulnerability is not listed in the CISA KEV catalog, but the high score and the nature of the flaw mean that once an attacker compromises a single node, they can easily leverage the flaw to gain elevated privileges across the cluster. Exploitation requires existing access to a node in the cluster and is not reachable from the outside, so the attack vector is internal or requires prior compromise of a node. Based on the description, this inference is drawn.