CVE-2026-102094: Kiteworks Email Protection Gateway unsafe reflection

Q: Who can exploit this issue?

An authenticated administrator who has mail-rule configuration privileges can exploit it. The attack requires access to import a rule configuration into the mail-processing pipeline.

Q: What versions are affected?

Kiteworks Email Protection Gateway versions before 9.5.0 are affected. Version 9.5.0 is not identified as affected by the provided information.

Q: What level of access could successful exploitation provide?

The attacker could cause execution of code outside the approved mail-processing component set. That code may run in the context of the mail-gateway service account.

Q: What should be restricted until systems are updated?

Restrict mail-rule configuration privileges and access to importing rule configurations to only fully trusted administrators. This directly limits the capability required to trigger the unsafe code loading.

Published Sep 30, 2026

Updated

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Unsafe Reflection and does not sufficiently restrict the code that the mail-processing pipeline could load from an imported rule configuration. An authenticated administrator with mail-rule configuration privileges could cause the gateway to load and execute code beyond the approved set of mail-processing components, potentially in the context of the mail-gateway service account.

Affected Software

1 affected component

Kiteworks Email Protection Gateway<9.5.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Kiteworks Email Protection Gateway to a version that resolves this vulnerability.
Fixed in 9.5.0

Event History

Sep 30, 2026

CVE Published

via MITRE·08:07 PM

Data Sourced

via MITRE·08:07 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An authenticated administrator who has mail-rule configuration privileges can exploit it. The attack requires access to import a rule configuration into the mail-processing pipeline.

What versions are affected?

Kiteworks Email Protection Gateway versions before 9.5.0 are affected. Version 9.5.0 is not identified as affected by the provided information.

What level of access could successful exploitation provide?

The attacker could cause execution of code outside the approved mail-processing component set. That code may run in the context of the mail-gateway service account.

What should be restricted until systems are updated?

Restrict mail-rule configuration privileges and access to importing rule configurations to only fully trusted administrators. This directly limits the capability required to trigger the unsafe code loading.

CVE-2026-102094: Kiteworks Email Protection Gateway unsafe reflection

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What versions are affected?

What level of access could successful exploitation provide?

What should be restricted until systems are updated?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What versions are affected?

What level of access could successful exploitation provide?

What should be restricted until systems are updated?