CVE-2025-53939: Accellion Kiteworks

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Kiteworks is a private data network (PDN). Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0.

Affected products

• Accellion Kiteworks: before 9.1.0 (fixed in 9.1.0)

Published 2025-11-29. Last modified 2026-10-07.