This vulnerability involves improper neutralization of CRLF sequences (CWE-93) in Kiteworks Core's multi-node cluster communication. An attacker who already has code execution on one node can exploit this flaw by submitting specially crafted values through the internal cluster interface. These values are written into monitoring configuration on another node without sufficient validation, enabling OS command execution limited to an unprivileged service account on that node. This cross-node command execution could potentially be used to escalate impact within the cluster environment.

The impact is limited to OS command execution on a node within a multi-node Kiteworks Core deployment, restricted to an unprivileged service account. This could allow an attacker with initial code execution on one node to extend their control to other nodes in the cluster, potentially compromising confidentiality, integrity, and availability of the affected system components. The CVSS 3.1 base score of 6.3 reflects a medium severity with low attack complexity and privileges required, but limited scope and impact.

No official patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to appliance nodes to trusted users only and monitor for suspicious activity within the cluster. Avoid exposing internal cluster interfaces to untrusted networks.