VULNERABILITY INTELLIGENCE

CVE-2025-53899

CVSS score7.2 HIGH
EPSS probability1.00%
CISA KEVNot currently listed
Published2025-11-29
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances to intercept upstream communication which could lead to an escalation of privileges. This issue has been patched in version 9.1.0.

Weakness classification

  • security-advisories@github.com: CWE-941

Primary references