{"id":"CVE-2026-102112","published":"2026-09-30T21:16:58.267","lastModified":"2026-10-01T14:17:15.153","description":"A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to that service account.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-78","CWE-269"],"vendors":[],"products":[],"references":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-658c-86vw-g9hf","tags":[]},{"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json","tags":[]}],"exploitRefs":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-658c-86vw-g9hf","tags":[]}],"hasPoc":true,"ai":{"summary":"This vulnerability allows an attacker with code execution privileges on a backend service account to escalate to root and execute arbitrary commands with the highest privileges, posing a significant risk to the system's security.","exploitability":"Exploitation requires existing local access to the backend service account and is relatively straightforward given the attacker's initial foothold.","blast_radius":"If exploited, the attacker could gain full control over the system, leading to potential data loss, system compromise, and unauthorized access to sensitive information.","remediation":"Disable the affected backend service account or restrict access to it to prevent unauthorized code execution.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","backend","local-privilege"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:59:22.108Z"}}