This vulnerability involves external control of file name or path (CWE-73) in the Kiteworks Email Protection Gateway. An authenticated administrator with limited delegated permissions can write files to arbitrary locations accessible by the Email Protection Gateway service account. This unauthorized file write capability can be leveraged to modify application files or configurations or cause denial of service by disrupting service availability. The CVSS 3.1 score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality impact, but high integrity and availability impacts. The affected versions are all versions prior to 9.5.1.

An attacker with authenticated limited delegated administrator permissions can exceed their intended privileges by writing files with attacker-controlled content to arbitrary locations accessible by the service account. This can lead to unauthorized modification of application files or configuration, potentially disrupting the availability of the Email Protection Gateway service. There is no confidentiality impact reported.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrator permissions carefully and monitor for unauthorized file modifications.