Unrated severityNVD Advisory· Published Nov 29, 2025· Updated Dec 1, 2025
Kiteworks Core is vulnerable to Improper Input Validation
CVE-2025-53939
Description
Kiteworks is a private data network (PDN). Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0.
Affected products
2- kiteworks/security-advisoriesv5Range: < 9.1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/kiteworks/security-advisories/security/advisories/GHSA-hpf5-6376-2565mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.