CVE-2026-102117— Kiteworks Core Remote Code Execution
Quick assessment
Affected
Kiteworks Core
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在已授权并启用远程支持功能的部署环境中，一个经过身份验证的系统管理员（同时持有保护所提交数据的密钥）可以将底层系统的支持出站连接重定向至其自行选择的目的地。该目的地随后可以在节点上执行操作系统命令并接收其输出，从而可能导致以本地服务账户权限进行远程代码执行。
Possible ATT&CK Techniques 2 AI
T1219 · Remote Access Tools T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-102117
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kiteworks Core Remote Code Execution
Source: CVE Program / CVE List V5
Vulnerability Description
On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who also possessed the key protecting the submitted data could redirect the underlying system's outbound support connection to a destination of their choosing. That destination could then have operating-system commands executed on the node and receive their output, potentially resulting in remote code execution with the privileges of a local service account.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在安全决策中依赖未经信任的输入
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-102117
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-102117
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-102117 (1)
Other References for CVE-2026-102117 (1)
Same Patch Batch · Kiteworks · 2026-09-30 · 61 CVEs total
| CVE-2026-102115 | 9.8 CRITICAL | Kiteworks Core Authentication Bypass in the Password Reset Workflow |
| CVE-2026-102149 | 9.4 CRITICAL | Kiteworks Email Protection Gateway Improper Access Control |
| CVE-2026-102147 | 9.3 CRITICAL | Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) |
| CVE-2026-102104 | 9.1 CRITICAL | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102095 | 9.1 CRITICAL | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102102 | 9.1 CRITICAL | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102105 | 9.1 CRITICAL | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102103 | 9.1 CRITICAL | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102106 | 9.1 CRITICAL | Kiteworks Email Protection Gateway improper authentication |
| CVE-2026-102120 | 8.8 HIGH | Kiteworks Core OS Command Injection |
| CVE-2026-102125 | 8.8 HIGH | Kiteworks Core Sandbox Escape |
| CVE-2026-102092 | 8.7 HIGH | Kiteworks Core stored XSS |
| CVE-2026-102100 | 8.7 HIGH | Kiteworks Core stored XSS |
| CVE-2026-102121 | 8.6 HIGH | Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor |
| CVE-2026-102126 | 8.1 HIGH | Kiteworks Core Stored Cross-site Scripting (XSS) |
| CVE-2026-102101 | 8.1 HIGH | Kiteworks Core deserialization of untrusted data |
| CVE-2026-102113 | 7.8 HIGH | Kiteworks Core Local Privilege Escalation |
| CVE-2026-102112 | 7.8 HIGH | Kiteworks Core Local Privilege Escalation |
| CVE-2026-102118 | 7.8 HIGH | Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation |
| CVE-2026-102143 | 7.5 HIGH | Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type |
Showing top 20 of 61 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Core
-
CVE-2026-102107
Kiteworks Core user impersonation in a file-request feature -
CVE-2026-102110
Missing authentication on a Kiteworks appliance setup functi -
CVE-2026-102111
Kiteworks Core Improper Validation of Specified Quantity in -
CVE-2026-102112
Kiteworks Core Local Privilege Escalation -
CVE-2026-102113
Kiteworks Core Local Privilege Escalation
Same vendor: Kiteworks
-
CVE-2026-102105
Kiteworks Email Protection Gateway server-side request forge -
CVE-2026-102106
Kiteworks Email Protection Gateway improper authentication -
CVE-2026-102107
Kiteworks Core user impersonation in a file-request feature -
CVE-2026-102108
Kiteworks Email Protection Gateway deserialization of untrus -
CVE-2026-102109
Kiteworks Secure Data Forms SQL injection
Same weakness: CWE-807
-
CVE-2026-101131
deepseek-ai deepseek-harness dsh index.ts reliance on untrus -
CVE-2026-101079
agentverus agentverus-scanner context.js isSecurityDefenseSk -
CVE-2026-84474
Automation-controller: automation-controller-container: auto -
CVE-2026-56681
9Router: Authentication Bypass in Public LLM API via Spoofab -
CVE-2026-87858
Temporal Server completion callback source header can direct
V. Comments for CVE-2026-102117
No comments yet