CVE-2026-102125: Kiteworks Core Sandbox Escape
The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could allow an attacker in that position to read or modify application data and configuration, or to disrupt the service on the affected appliance.
Affected Software
Event History
Frequently Asked Questions
What access must an attacker have before they can exploit this issue?
The attacker must already be able to execute code within the document-conversion sandbox. The vulnerability is rated as requiring local access and low privileges, with no user interaction required.
What could an attacker do after escaping the sandbox?
Escaped code could run with the privileges of the service account that operates the application. This could allow reading or modifying application data and configuration, or disrupting service on the affected appliance.