Read the docs
TI-2025-13035 Aliases CVE-2025-14262GHSA-mcx7-55c8-m5jv

Jobs can be saved as workflows with wrong permissions on KNIME Business Hub

Priority LOW 23CWE-708Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job owner. The attacker must have permissions to access the jobs but then they were saved into the catalog service using the wrong owner permissions. Therefore it may have been possible to save into spaces where the attacker does not have write permissions. There is no workaround.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00181 7th percentileScored 2026-11-07
Fix Fixed KNIME Business Hub (KNIME): 1.17.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
KNIMEKNIME Business Hubbefore 1.17.01.17.0Patch availableCNA
  • KNIME Business Hub VendorKNIME Affected before 1.17.0 Fixed in 1.17.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:*before 1.17.0VulnerableKNIME
  • cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:* Versions before 1.17.0 Vulnerable ·KNIME

Remediation

  • Fix · CNA KNIME Business Hub (KNIME) Fixed in 1.17.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-14262
  2. 2026-10-03 Alias added: GHSA-mcx7-55c8-m5jv

References

Advisory 1

  • TI-2025-02116 Hard-coded password for object store of KNIME Business Hub CVSS 4.0HIGH 8.8
  • TI-2025-02436 Ingress-nginx vulnerability in KNIME Business Hub CVSS 4.0HIGH 8.7
  • TI-2024-06119 Denial-of-service on KNIME Business Hub when certain jobs are executed CVSS 4.0HIGH 7.1
  • TI-2025-02634 Cross-site scripting vulnerabilities in KNIME Business Hub web pages CVSS 4.0MEDIUM 5.3
  • TI-2023-02376 Sensitive information disclosure in KNIME Hub Web Application CVSS 3.1MEDIUM 5.3
  • TI-2025-10293 Open redirect vulnerability in KNIME Business Hub CVSS 4.0MEDIUM 5.3
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences