An authenticated administrator in Kiteworks Core versions prior to 9.5.1 can bypass the content validation mechanisms applied to administrative file uploads. This allows the administrator to upload and store files containing potentially dangerous content on the appliance. However, this vulnerability does not directly enable code execution; exploitation would require chaining with another vulnerability to run the stored malicious file.

The vulnerability allows an authenticated administrator to store files with dangerous content on the appliance, which could potentially be used in further attacks if combined with other vulnerabilities. The confidentiality, integrity, and availability impacts are rated low to medium, as the vulnerability does not directly lead to code execution or immediate compromise.

No official patch information is provided. Since the vulnerability requires authenticated administrator access and does not directly lead to code execution, organizations should restrict administrative access to trusted personnel and monitor for unusual file uploads. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.