PT-2025-40343 · Knime · Knime Business Hub

Zigrin · Published 2025-10-02 · Updated 2026-02-27 · CVE-2025-11239

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions KNIME Business Hub versions prior to 1.16.0

Description Potentially sensitive information within jobs on KNIME Business Hub was accessible to all team members. From version 1.16.0 onwards, only job metadata is visible to team members, with full access restricted to the job creator, including in- and output data.

Recommendations Update KNIME Business Hub to version 1.16.0 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-11239

Affected Products

Knime Business Hub

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-11239 · Security Note
• https://knime.com/security/advisories · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-11239 · Vendor Advisory
• https://t.me/CVEtracker/33932 · Telegram Post
• https://twitter.com/CVEnew/status/1973735562352685441 · Twitter Post
• https://t.me/cveNotify/153411 · Telegram Post
• https://t.me/cveNotify/145092 · Telegram Post
• https://t.me/cveNotify/137166 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1973757783049699561 · Twitter Post