{"id":"CVE-2026-102120","published":"2026-09-30T21:17:00.057","lastModified":"2026-10-01T14:17:16.140","description":"A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution on one node of a clustered Kiteworks deployment to run operating system commands with elevated privileges on another node of the same cluster. Insufficient input validation in an internal cluster management function let attacker-supplied values reach a privileged execution context; exploitation requires existing access to a node in the cluster, and the affected function is not reachable from outside the cluster.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-78","CWE-269"],"vendors":[],"products":[],"references":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-m968-434m-rgwp","tags":[]},{"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json","tags":[]}],"exploitRefs":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-m968-434m-rgwp","tags":[]}],"hasPoc":true,"ai":{"summary":"This vulnerability allows an attacker with code execution on one node to escalate privileges and run commands with elevated permissions on another node in the same Kiteworks cluster, leading to full control over the cluster.","exploitability":"Exploitation requires existing code execution on one node and is moderately difficult due to the need for internal cluster management function access.","blast_radius":"If exploited, the attacker could gain full control over the entire Kiteworks cluster, potentially leading to data loss, service disruption, and unauthorized access.","remediation":"Upgrade to Kiteworks 3.1.2 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","cluster","internal"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-03T08:51:24.299Z"}}