This vulnerability arises from reliance on untrusted inputs in a security decision within Kiteworks Core's remote-support feature. When licensed and enabled, an authenticated System Administrator who also has the key protecting submitted data can manipulate the outbound support connection to redirect it to a destination of their choice. This redirection enables execution of operating system commands on the affected node and retrieval of their output, potentially resulting in remote code execution with local service account privileges. The CVSS 3.1 base score is 7.2, indicating a high severity impact with network attack vector, low attack complexity, high privileges required, no user interaction, and high confidentiality, integrity, and availability impacts.

Successful exploitation allows an authenticated System Administrator with the key to execute arbitrary operating system commands remotely on the affected system with local service account privileges. This can lead to full compromise of the affected node's confidentiality, integrity, and availability.

A fix is available in Kiteworks Core version 9.5.1 and later. Users should upgrade to version 9.5.1 or newer to remediate this vulnerability. Since this is not a cloud service, remediation depends on applying the vendor patch. No additional mitigation guidance is provided in the vendor advisory.