Unrated severityNVD Advisory· Published Nov 29, 2025· Updated Dec 3, 2025
Kiteworks MFT is vulnerable to Insufficient Session Expiration
CVE-2025-53896
Description
Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0.
Affected products
2- kiteworks/security-advisoriesv5Range: < 9.1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/kiteworks/security-advisories/security/advisories/GHSA-23h2-3jj8-58hmmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.