Kiteworks Core Unrestricted File Upload Vulnerability Prior to Version 9.2.0
Vulnerability
A vulnerability exists in Kiteworks Core versions prior to 9.2.0, allowing for the unrestricted upload of arbitrary files without proper validation. This issue could be exploited by malicious administrators to upload unauthorized file types to the system.
Impact
Exploitation of this vulnerability could lead to the upload of dangerous file types, potentially allowing for further exploitation of the system.
Remediation
Users are advised to upgrade Kiteworks to version 9.2.0 or later.
Added: Feb 27, 2026, 9:23 PM
Updated: Feb 27, 2026, 9:23 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
4.8remediation
0.0relevance
3.3threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.