Kiteworks Restores Systems After Patching Critical Vulnerability

Kiteworks has brought all hosted customer systems back online after patching a critical vulnerability and lifting a precautionary shutdown advisory.

The company, formerly known as Accellion, had previously urged its global customer base to temporarily shut down servers following warnings from federal intelligence authorities regarding a potentially imminent cyberattack.

Following the deployment of a patch, Kiteworks confirmed that continuous monitoring revealed no abnormal activity. The company stated it has no indication that any Kiteworks or customer systems were compromised during the period the advisory was active.

Vulnerability Details and Mitigation

The critical vulnerability was identified in an unnamed feature used by fewer than 1% of the company’s total customers. Kiteworks specifically advised organisations using self-hosted Kiteworks Advanced Forms to contact support for further assistance.

While the company has deployed a fix and applied an additional protective layer across all environments, it has not yet assigned a Common Vulnerabilities and Exposures (CVE) ID to the flaw. All other Kiteworks products were reported to be unaffected by the issue.

The shutdown recommendation was officially lifted on 27 September, allowing customers to restart their systems.

Historical Context

Kiteworks provides a Private Content Network (PCN) that integrates enterprise email, file sharing, and managed file transfer (MFT) services for thousands of corporations and government agencies. Its network serves over 100 million end-users.

The company has previously dealt with significant security incidents involving its legacy software. In a past campaign, the Clop ransomware gang exploited zero-day vulnerabilities in the Accellion File Transfer Appliance (FTA), leading to data breaches at high-profile entities including Shell, the Reserve Bank of New Zealand, and various government offices.