CVE-2025-53900

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-53900

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

K

iteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, an unfavourable definition of roles and permissions in Kiteworks MFT on managing Connections could lead to unexpected escalation of privileges for authorized users. This issue has been patched in version 9.1.0.

References
Link Resource
https://github.com/kiteworks/security-advisories/security/advisories/GHSA-gjq3-8v6p-2h6h Third Party Advisory Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:accellion:kiteworks_managed_file_transfer:*:*:*:*:*:*:*:*
History

03 Dec 2025, 17:49

Type Values Removed Values Added
First Time Accellion
Accellion kiteworks Managed File Transfer
References () https://github.com/kiteworks/security-advisories/security/advisories/GHSA-gjq3-8v6p-2h6h - () https://github.com/kiteworks/security-advisories/security/advisories/GHSA-gjq3-8v6p-2h6h - Third Party Advisory, Patch
CPE cpe:2.3:a:accellion:kiteworks_managed_file_transfer:*:*:*:*:*:*:*:*

29 Nov 2025, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-29 03:15

Updated : 2025-12-03 17:49

NVD link : CVE-2025-53900

Mitre link : CVE-2025-53900

CVE.ORG link : CVE-2025-53900

JSON object : View

Products Affected

accellion

CWE
CWE-267

Privilege Defined With Unsafe Actions