Kiteworks Core: Sandbox escape in document conversion
Summary
The document-conversion sandbox in Kiteworks Core does not fully confine code running inside it. An attacker who already executes code within that sandbox can escape it and act with the privileges of the application's service account. This could allow reading or modifying application data and configuration, or disrupting the service on the appliance. The attacker needs an initial foothold, so this is a second-stage flaw that matters most in combination with another vulnerability.
Affected
- Kiteworks Core versions before 9.5.0, according to CVE and NVD-derived records
- Conflicting data: one vulnerability record lists versions up to 9.4.x; the vendor advisory could not be verified
Fixed in
Unconfirmed. One aggregator lists 9.5.0 as unaffected, but this is not verified against the vendor advisory. Kiteworks states that its latest release, 9.5.1, contains fixes for all known vulnerabilities (not CVE-specific).
Workaround
No CVE-specific workaround known. Unknown whether the vendor has published interim hardening guidance for the sandbox.
Exploitation
- No public evidence of exploitation in the wild found; Kiteworks reports no indication of compromise
- CISA SSVC: exploitation none, automatable no, technical impact total
- Not listed in the CISA KEV catalogue (per Strix record)
- No public proof of concept found
Our recommendation
- Upgrade to Kiteworks 9.5.1 or the latest release and confirm with Kiteworks support that the build contains the fix for this CVE
- Restrict administrative and external access to the appliance
- Monitor for unexpected activity of the service account and back up configuration and data
- Prioritise this if the appliance is internet-facing or processes sensitive files
- Re-check the vendor advisory, as the sources used may be outdated
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- GitHub Security Advisory GHSA-58j2-hj9r-c258 (Kiteworks) github.com
- CISA CSAF advisory VA-26-274-01 raw.githubusercontent.com
- VulDB CVE-2026-102125 vuldb.com
- Threatint CVE-2026-102125 cve.threatint.com
- OffSeq Radar CVE-2026-102125 radar.offseq.com
- Strix CVE-2026-102125 www.strix.ai
- The Cyber Express: Kiteworks shutdown advisory lifted thecyberexpress.com
- TechCrunch: Kiteworks urges customers to shut down servers techcrunch.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 23:04.
Original description (NVD)
The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could allow an attacker in that position to read or modify application data and configuration, or to disrupt the service on the affected appliance.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.