CVE-2025-53896

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0.
Configurations

Configuration 1 (hide)

cpe:2.3:a:accellion:kiteworks_managed_file_transfer:*:*:*:*:*:*:*:*

History

02 Dec 2025, 20:08

Type Values Removed Values Added
CPE cpe:2.3:a:accellion:kiteworks_managed_file_transfer:*:*:*:*:*:*:*:*
First Time Accellion kiteworks Managed File Transfer
Accellion
References () https://github.com/kiteworks/security-advisories/security/advisories/GHSA-23h2-3jj8-58hm - () https://github.com/kiteworks/security-advisories/security/advisories/GHSA-23h2-3jj8-58hm - Patch, Third Party Advisory

29 Nov 2025, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-11-29 03:15

Updated : 2025-12-02 20:08


NVD link : CVE-2025-53896

Mitre link : CVE-2025-53896

CVE.ORG link : CVE-2025-53896


JSON object : View

Products Affected

accellion

  • kiteworks_managed_file_transfer
CWE
CWE-613

Insufficient Session Expiration