Improper Permission Check in KNIME Business Hub by KNIME
CVE-2025-14262

5.3MEDIUM

Key Information:

Vendor

Knime

Status
Knime Business Hub
Vendor
CVE Published:
8 December 2025

What is CVE-2025-14262?

An insufficient permission verification in KNIME Business Hub prior to version 1.17.0 permits authenticated users to save jobs of other users as if they were the original job owners. This flaw allows attackers, who possess access to certain jobs, to exploit the system by saving these jobs into locations where they would not normally have write permissions. This can lead to unauthorized job visibility and manipulation within the catalog service.

Affected Version(s)

KNIME Business Hub 0

KNIME Business Hub 0 < 1.17.0

KNIME Business Hub 1.17.0

References

https://www.knime.com/security/advisories#CVE-2025-11239

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-14262 : Improper Permission Check in KNIME Business Hub by KNIME