What’s Vulnerable › Vulnerabilities

CVE-2026-102125: Kiteworks Core Sandbox Escape

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-30 · updated 2026-10-08
• Weakness: CWE-653

Description

The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could allow an attacker in that position to read or modify application data and configuration, or to disrupt the service on the affected appliance.

Affected products

• Kiteworks Email Protection Gateway: before 9.5.0 — fixed in 9.5.0

How to fix

Upgrade to a fixed version: Kiteworks Email Protection Gateway 9.5.0. Check the vendor advisory for mitigations.

References

• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-58j2-hj9r-c258
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json

Get alerted when CVE-2026-102125 or the next vulnerability affects your stack