CVE-2025-53897

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, this vulnerability could allow an external attacker to gain access to log information from the system by tricking an administrator into browsing a specifically crafted fake page of Kiteworks MFT. This issue has been patched in version 9.1.0.

Score

CVSS 3.1 6.8 Medium

Status

Analyzed - security-advisories@github.com

Published

2025-11-29

Last modified

2026-10-07

Weaknesses

CWE-352

Affected products

• Kiteworks Managed File Transfer (Accellion)
• Security-advisories (Kiteworks)

References

• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-cxwc-7899-3h4m