PT-2025-49540
CVE-2025-14262
·
Published
2025-12-08
·
Updated
2026-10-07
Description by
CVSS 4.0
5.3
MediumMetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/AU:Y/R:U/V:C/RE:M/U:Green
Name of the Vulnerable Software and Affected Versions
KNIME Business Hub versions prior to 1.17.0
Description
A flaw exists in KNIME Business Hub that, before version 1.17.0, allowed an authenticated user to incorrectly save jobs belonging to other users as if they were the owner. This occurred due to an insufficient permission check before saving jobs. An attacker with access to jobs could potentially save them into spaces where they lacked write permissions, effectively altering ownership.
Recommendations
Update KNIME Business Hub to version 1.17.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾