CVE-2025-53899

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances to intercept upstream communication which could lead to an escalation of privileges. This issue has been patched in version 9.1.0.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/kiteworks/security-advisories/security/advisories/GHSA-5gx5-vcpp-8cr5	Patch Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:accellion:kiteworks_managed_file_transfer:*:*:*:*:*:*:*:*

History

07 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Kiteworks MFT orquesta flujos de trabajo de transferencia de archivos de extremo a extremo. Antes de la versión 9.1.0, el back-end de Kiteworks MFT es vulnerable a una especificación incorrecta del destino en un canal de comunicación, lo que permite a un atacante con privilegios administrativos en el sistema, bajo ciertas circunstancias, interceptar la comunicación ascendente, lo que podría conducir a una escalada de privilegios. Este problema ha sido parcheado en la versión 9.1.0.

Information

Published : 2025-11-29 03:15

Updated : 2026-10-07 20:10

NVD link : CVE-2025-53899

Mitre link : CVE-2025-53899

CVE.ORG link : CVE-2025-53899

JSON object : View

Products Affected

accellion

kiteworks_managed_file_transfer

CWE

CWE-941

Incorrectly Specified Destination in a Communication Channel

{"id": "CVE-2025-53899", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-53899", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-01T15:41:01.311382Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "kiteworks", "product": "security-advisories", "versions": [{"status": "affected", "version": "< 9.1.0"}]}]}], "published": "2025-11-29T03:15:58.817", "references": [{"url": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-5gx5-vcpp-8cr5", "tags": ["Patch", "Third Party Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-941"}]}], "descriptions": [{"lang": "en", "value": "Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances to intercept upstream communication which could lead to an escalation of privileges. This issue has been patched in version 9.1.0."}, {"lang": "es", "value": "Kiteworks MFT orquesta flujos de trabajo de transferencia de archivos de extremo a extremo. Antes de la versi\u00f3n 9.1.0, el back-end de Kiteworks MFT es vulnerable a una especificaci\u00f3n incorrecta del destino en un canal de comunicaci\u00f3n, lo que permite a un atacante con privilegios administrativos en el sistema, bajo ciertas circunstancias, interceptar la comunicaci\u00f3n ascendente, lo que podr\u00eda conducir a una escalada de privilegios. Este problema ha sido parcheado en la versi\u00f3n 9.1.0."}], "lastModified": "2026-10-07T20:10:01.970", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:accellion:kiteworks_managed_file_transfer:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "795C3F91-729E-4363-9C52-1C9C7CBAD284", "versionEndExcluding": "9.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}