Read the docs
TI-2025-33772 Aliases CVE-2025-53899

Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel

Priority LOW 36CWE-941Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances to intercept upstream communication which could lead to an escalation of privileges. This issue has been patched in version 9.1.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01004 63rd percentileScored 2026-11-07
Fix Fixed security-advisories (kiteworks): 9.1.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Accellionsecurity-advisoriesbefore 9.1.09.1.0Patch availableCNA
  • security-advisories VendorAccellion Affected before 9.1.0 Fixed in 9.1.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:accellion:kiteworks_managed_file_transfer:*:*:*:*:*:*:*:*before 9.1.0VulnerableAccellion
  • cpe:2.3:a:accellion:kiteworks_managed_file_transfer:*:*:*:*:*:*:*:* Versions before 9.1.0 Vulnerable ·Accellion

Remediation

  • Fix · CNA security-advisories (kiteworks) Fixed in 9.1.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-53899

References

Patch 1

  • TI-2025-33773 Kiteworks MFT has a Privilege Defined With Unsafe Actions CVSS 3.1HIGH 8.8
  • TI-2025-33770 Kiteworks MFT is vulnerable to Insufficient Session Expiration CVSS 3.1HIGH 8.1
  • TI-2025-33771 Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability CVSS 3.1MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences