CVE-2026-102141
MEDIUM
NVD
CVSS Score
6.7
Severity
MEDIUM
Published
Sep 30, 2026
Vendor
unknown
Description
Two Kiteworks Core cluster-management operations did not validate file paths supplied to them, so an attacker holding root on one node of a cluster could write files as root onto another node and cause them to be executed there. Exploitation requires backend root access on a cluster node and a pending software patch present on the target node.