Kiteworks MFT Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Kiteworks MFT versions prior to 9.1.0. The issue arises from an unfavorable definition of roles and permissions in managing Connections, which could lead to unexpected escalation of privileges for authorized users.

Impact

Exploitation of this vulnerability could allow authorized users to gain elevated privileges, potentially leading to unauthorized access or actions within the application.

Remediation

Users are advised to upgrade Kiteworks MFT to version 9.1.0 or later.