PT-2025-39922 · Knowage+1 · Knowage+1

Trganda · Published 2025-09-29 · Updated 2025-09-30 · CVE-2025-59954

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Knowage versions 8.1.26 and below

Description Knowage is an analytics and business intelligence suite. Versions 8.1.26 and below are susceptible to Remote Code Execution due to the use of an unsafe org.apache.commons.jxpath.JXPathContext in the MetaService.java service. The issue is addressed in version 8.1.27. The vulnerable component allows for unauthenticated Remote Code Execution with full system impact.

Recommendations Update to Knowage version 8.1.27 or later.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2026-00115

CVE-2025-59954

GHSA-96CV-75HG-XRGQ

Affected Products

Apache Commons Jxpath

Knowage

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59954.json · Exploit
• 🔥 https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-96cv-75hg-xrgq · Exploit
• https://github.com/KnowageLabs/Knowage-Server/commit/1bb60d42557724f7ed24c19df6c5017e169527ca · Patch
• https://osv.dev/vulnerability/CVE-2025-59954 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59954 · Security Note
• https://bdu.fstec.ru/vul/2026-00115 · Security Note
• https://t.me/CVEtracker/33684 · Telegram Post
• https://twitter.com/CVEnew/status/1972829945610051879 · Twitter Post
• https://twitter.com/0dayPublishing/status/1972812067481469192 · Twitter Post