This vulnerability (CWE-77) arises from improper neutralization of special elements in a user-supplied path within an optional repository-connector feature of Kiteworks Core. The flaw allows an authenticated system administrator to inject additional commands when the path is passed to an external command, enabling arbitrary file writes and code execution under the service account's privileges. Successful exploitation also requires network connectivity from the vulnerable appliance to an attacker-controlled system. The affected versions are all Kiteworks Core versions prior to 9.5.1.

An authenticated system administrator can leverage this vulnerability to execute arbitrary commands and write files as the service account running the connector feature. This could lead to unauthorized code execution within the context of that account. The attack requires network egress from the appliance to an external system controlled by the attacker, limiting exploitation scenarios. There are no known exploits in the wild at this time.

No official patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict authenticated administrator access and limit network egress from the appliance to untrusted external systems to reduce exploitation risk.