CyberRota Analysis
AI-GeneratedA privilege escalation vulnerability in Kiteworks allows an attacker with code execution on one node of a clustered deployment to execute operating system commands with elevated privileges on another node. This issue arises from insufficient input validation in an internal cluster management function, meaning that exploitation is contingent upon prior access to a node within the cluster. Organizations using Kiteworks should prioritize addressing this vulnerability to mitigate the risk of unauthorized access and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution on one node of a clustered Kiteworks deployment to run operating system commands with elevated privileges on another node of the same cluster. Insufficient input validation in an internal cluster management function let attacker-supplied values reach a privileged execution context; exploitation requires existing access to a node in the cluster, and the affected function is not reachable from outside the cluster.
Related CVEs
Other vulnerabilities affecting the same vendor(s)