Kiteworks Command Execution Vulnerability Allowing Arbitrary File Overwrite and Elevated Access

A command execution vulnerability has been identified in Kiteworks Core versions prior to 9.2.0. This vulnerability allows authenticated users to redirect command output to arbitrary file locations, potentially overwriting critical system files and leading to elevated access. The issue has been patched in version 9.2.0.

Impact

Exploitation of this vulnerability could overwrite important system files, potentially leading to unauthorized access or privileges.

Remediation

Users are advised to upgrade Kiteworks to version 9.2.0 or later.