CVE-2025-53939

Kiteworks is a private data network (PDN). Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0.

Score

CVSS 3.1 8.8 High

Status

Analyzed - security-advisories@github.com

Published

2025-11-29

Last modified

2026-10-07

Weaknesses

CWE-20

Affected products

• Kiteworks (Accellion)
• Security-advisories (Kiteworks)

References

• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-hpf5-6376-2565