The vulnerability in Kiteworks Core involves an administrative import function that does not properly validate the entitlement of the requesting administrator to create privileged integration credentials. As a result, a delegated administrator with narrowly scoped administrative permissions can exploit this flaw to gain full system administrator privileges. This represents a serious privilege escalation issue due to improper access control (CWE-284).

An attacker with delegated administrative access can escalate privileges to full system administrator level, potentially gaining complete control over the Kiteworks Core system. This could lead to unauthorized access, modification, or disruption of system operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict delegated administrative permissions carefully and monitor administrative activities closely to prevent unauthorized privilege escalation.