CVE-2026-102097: Kiteworks Email Protection Gateway remote code execution

Q: Who can exploit this issue?

An authenticated administrator of the affected Kiteworks Email Protection Gateway can exploit it. The available information does not indicate that unauthenticated users can trigger the vulnerability.

Q: What action triggers exploitation?

The administrator must import a crafted configuration submission. Insufficient validation of configuration contents before processing can allow arbitrary commands to execute on the gateway.

Q: Which versions are affected?

Kiteworks Email Protection Gateway versions before 9.5.0 are affected. Upgrading to version 9.5.0 or later addresses the affected version range described in the advisory.

Q: What can be done if an upgrade cannot be performed immediately?

Restrict administrator access and prevent untrusted or unreviewed configuration imports. Because exploitation requires an authenticated administrator to submit a crafted configuration, limiting administrative accounts and configuration-import permissions reduces exposure.

Published Sep 30, 2026

Updated

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protection Gateway allowed an authenticated administrator to import configuration whose contents were not sufficiently validated before being processed. A crafted submission could potentially allow arbitrary commands to be executed on the affected gateway.

Affected Software

1 affected component

Kiteworks Email Protection Gateway<9.5.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Kiteworks Email Protection Gateway to a version that resolves this vulnerability.
Fixed in 9.5.0

Event History

Sep 30, 2026

CVE Published

via MITRE·08:07 PM

Data Sourced

via MITRE·08:07 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An authenticated administrator of the affected Kiteworks Email Protection Gateway can exploit it. The available information does not indicate that unauthenticated users can trigger the vulnerability.

What action triggers exploitation?

The administrator must import a crafted configuration submission. Insufficient validation of configuration contents before processing can allow arbitrary commands to execute on the gateway.

Which versions are affected?

Kiteworks Email Protection Gateway versions before 9.5.0 are affected. Upgrading to version 9.5.0 or later addresses the affected version range described in the advisory.

What can be done if an upgrade cannot be performed immediately?

Restrict administrator access and prevent untrusted or unreviewed configuration imports. Because exploitation requires an authenticated administrator to submit a crafted configuration, limiting administrative accounts and configuration-import permissions reduces exposure.

CVE-2026-102097: Kiteworks Email Protection Gateway remote code execution

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What action triggers exploitation?

Which versions are affected?

What can be done if an upgrade cannot be performed immediately?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What action triggers exploitation?

Which versions are affected?

What can be done if an upgrade cannot be performed immediately?