CVE-2025-11239 Job details are visible to all team members on KNIME Business Hub
Attackers can view sensitive job details belonging to other team members due to insufficient access controls in KNIME Business Hub.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-11239?
CVE-2025-11239 is a low-severity missing authorization vulnerability in KNIME Business Hub, published on 2 Oct 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data (if present).
Weakness: CWE-863
Which versions are affected by CVE-2025-11239?
It affects 1 product.
Products include Knime Business Hub.
How do I fix CVE-2025-11239?
No fix has been published for CVE-2025-11239 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-11239 being exploited?
There is no known exploitation of CVE-2025-11239 in the wild and no public exploit code.
Other vulnerabilities in KNIME Business Hub
- CVE-2025-2402 Hard-coded password for object store of KNIME Business Hub
- CVE-2025-2787 Ingress-nginx vulnerability in KNIME Business Hub
- CVE-2024-6598 Denial-of-service on KNIME Business Hub when certain jobs are executed
- CVE-2025-14262 Jobs can be saved as workflows with wrong permissions on KNIME Business Hub
- CVE-2025-11240 Open redirect vulnerability in KNIME Business Hub
Sources
Also known as GHSA-967v-9xqg-gjxg.