CVE-2026-102125

8.8 Élevée

Publiée le 30/09/2026 à 23:17 · Modifiée le 08/10/2026 à 15:43 · Analysée par le NVD · Source : 9119a7d8-5eab-497f-8521-727c672e3725

Description

The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could allow an attacker in that position to read or modify application data and configuration, or to disrupt the service on the affected appliance.

Traduire en français

Produits concernés

Kiteworks Core
Accellion kiteworks

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.8 Élevée	9119a7d8-5eab-497f-8521-727c672e3725	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-653
CWE-668

Références

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-58j2-hj9r-c258 Broken Link
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json Broken Link

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories