Kiteworks Email Protection Gateway suffers from a missing authentication control (CWE-306) that fails to sufficiently restrict which account a certificate can be assigned to. This vulnerability enables an attacker to link a certificate to a different user's account, potentially exposing encrypted mail contents and, in environments using certificate-based login, allowing unauthorized account access. The CVSS 3.1 base score is 9.4 (critical), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality and integrity impacts with low availability impact.

An attacker exploiting this vulnerability can compromise the confidentiality and integrity of another user's encrypted emails by associating a certificate with that user's account. Additionally, if certificate-based login is enabled, the attacker may gain unauthorized access to the affected account. This can lead to data breaches and unauthorized account control.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider disabling certificate-based login if feasible to reduce risk.