CVE-2026-102089: Kiteworks Email Protection Gateway path traversal
Published Sep 30, 2026
·Updated
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative import function allowed an authenticated administrator to write files to arbitrary locations on the server. This could potentially be leveraged to execute arbitrary code on the underlying system.
Affected Software
1 affected component
Kiteworks Email Protection Gateway<9.5.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kiteworks Email Protection Gatewayto a version that resolves this vulnerability.Fixed in 9.5.0
Event History
Sep 30, 2026
CVE Published
via MITRE·08:05 PM
Data Sourced
via MITRE·08:05 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeakness