---
id: CVE-2026-102089
title: >-
  Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a
  path traversal weakness in an administrative import function allowed an
  authenticated administrator to write files to arbitrary locations on the
  server
summary: >-
  Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a
  path traversal weakness in an administrative import function allowed an
  authenticated administrator to write files to arbitrary locations on the
  server. This coul…
severity: high
cvss: 7.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-22
vendor: accellion
product: kiteworks
affected:
  - kiteworks < 9.5.0
patched:
  - kiteworks 9.5.0
published: '2026-09-30'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T13:42:51.950'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-102089'
references:
  - url: >-
      https://github.com/kiteworks/security-advisories/security/advisories/GHSA-p853-p65q-2vc8
    label: 9119a7d8-5eab-497f-8521-727c672e3725
  - url: >-
      https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json
    label: 9119a7d8-5eab-497f-8521-727c672e3725
tags:
  - nvd
  - cve.org
epss: 0.01547
epssPercentile: 0.74875
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-01T13:29:22.647132Z'
ingestedAt: '2026-09-30T21:25:07.819Z'
---

## Overview

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative import function allowed an authenticated administrator to write files to arbitrary locations on the server. This could potentially be leveraged to execute arbitrary code on the underlying system.

## Affected

- `kiteworks < 9.5.0`

## Remediation

Upgrade past the affected range:

- `kiteworks 9.5.0`