Read the docs
TI-2025-02436 Aliases CVE-2025-2787GHSA-x237-489c-52j2

Ingress-nginx vulnerability in KNIME Business Hub

Priority MEDIUM 40CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-94.

Summary

KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component. In the worst case a complete takeover of the Kubernetes cluster is possible. Since the affected component is only reachable from within the cluster, i.e. requires an authenticated user, the severity in the context of KNIME Business Hub is slightly lower. Besides applying the publicly known workarounds, we strongly recommend updating to one of the following versions of KNIME Business Hub: * 1.13.3 or above * 1.12.4 or above * 1.11.4 or above * 1.10.4 or above *

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00499 43rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
KNIMEKNIME Business Hub1.13.0 – 1.13.2; 1.12.0 – 1.12.3; 1.11.0 – 1.11.3; up to 1.10.3—No fix listedCNA
  • KNIME Business Hub VendorKNIME Affected 1.13.0 – 1.13.2; 1.12.0 – 1.12.3; 1.11.0 – 1.11.3; up to 1.10.3 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:*1.10.0 to before 1.10.4; 1.11.0 to before 1.11.4; 1.12.0 to before 1.12.4; 1.13.0 to before 1.13.3VulnerableKNIME
  • cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:* Versions 1.10.0 to before 1.10.4; 1.11.0 to before 1.11.4; 1.12.0 to before 1.12.4; 1.13.0 to before 1.13.3 Vulnerable ·KNIME

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-2787
  2. 2026-10-03 Alias added: GHSA-x237-489c-52j2

References

Advisory 1

  • TI-2025-02116 Hard-coded password for object store of KNIME Business Hub CVSS 4.0HIGH 8.8
  • TI-2024-06119 Denial-of-service on KNIME Business Hub when certain jobs are executed CVSS 4.0HIGH 7.1
  • TI-2025-02634 Cross-site scripting vulnerabilities in KNIME Business Hub web pages CVSS 4.0MEDIUM 5.3
  • TI-2023-02376 Sensitive information disclosure in KNIME Hub Web Application CVSS 3.1MEDIUM 5.3
  • TI-2025-10293 Open redirect vulnerability in KNIME Business Hub CVSS 4.0MEDIUM 5.3
  • TI-2025-13035 Jobs can be saved as workflows with wrong permissions on KNIME Business Hub CVSS 4.0MEDIUM 5.3
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences