CVE-2026-102094: Kiteworks Email Protection Gateway unsafe reflection
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Unsafe Reflection and does not sufficiently restrict the code that the mail-processing pipeline could load from an imported rule configuration. An authenticated administrator with mail-rule configuration privileges could cause the gateway to load and execute code beyond the approved set of mail-processing components, potentially in the context of the mail-gateway service account.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kiteworks Email Protection Gatewayto a version that resolves this vulnerability.Fixed in 9.5.0
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated administrator who has mail-rule configuration privileges can exploit it. The attack requires access to import a rule configuration into the mail-processing pipeline.
What versions are affected?
Kiteworks Email Protection Gateway versions before 9.5.0 are affected. Version 9.5.0 is not identified as affected by the provided information.
What level of access could successful exploitation provide?
The attacker could cause execution of code outside the approved mail-processing component set. That code may run in the context of the mail-gateway service account.
What should be restricted until systems are updated?
Restrict mail-rule configuration privileges and access to importing rule configurations to only fully trusted administrators. This directly limits the capability required to trigger the unsafe code loading.