Medium severity6.8NVD Advisory· Published Nov 29, 2025· Updated Jun 17, 2026
CVE-2025-53897
CVE-2025-53897
Description
Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, this vulnerability could allow an external attacker to gain access to log information from the system by tricking an administrator into browsing a specifically crafted fake page of Kiteworks MFT. This issue has been patched in version 9.1.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: < 9.1.0
- cpe:2.3:a:accellion:kiteworks_managed_file_transfer:*:*:*:*:*:*:*:*Range: <9.1.0
Patches
Vulnerability mechanics
References
1- github.com/kiteworks/security-advisories/security/advisories/GHSA-cxwc-7899-3h4mnvdPatchThird Party Advisory
News mentions
0No linked articles in our index yet.