CVE-2026-102097: Kiteworks Email Protection Gateway remote code execution
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protection Gateway allowed an authenticated administrator to import configuration whose contents were not sufficiently validated before being processed. A crafted submission could potentially allow arbitrary commands to be executed on the affected gateway.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kiteworks Email Protection Gatewayto a version that resolves this vulnerability.Fixed in 9.5.0
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated administrator of the affected Kiteworks Email Protection Gateway can exploit it. The available information does not indicate that unauthenticated users can trigger the vulnerability.
What action triggers exploitation?
The administrator must import a crafted configuration submission. Insufficient validation of configuration contents before processing can allow arbitrary commands to execute on the gateway.
Which versions are affected?
Kiteworks Email Protection Gateway versions before 9.5.0 are affected. Upgrading to version 9.5.0 or later addresses the affected version range described in the advisory.
What can be done if an upgrade cannot be performed immediately?
Restrict administrator access and prevent untrusted or unreviewed configuration imports. Because exploitation requires an authenticated administrator to submit a crafted configuration, limiting administrative accounts and configuration-import permissions reduces exposure.