CVE-2025-11239: Job details are visible to all team members on KNIME Business Hub
Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data (if present).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11239?
CVE-2025-11239 is classified as a potential information disclosure vulnerability that exposes sensitive job data in KNIME Business Hub versions prior to 1.16.0.
How do I fix CVE-2025-11239?
To resolve CVE-2025-11239, upgrade to KNIME Business Hub version 1.16.0 or later, which restricts sensitive job information visibility.
What type of data is exposed in CVE-2025-11239?
CVE-2025-11239 potentially exposes sensitive information contained in jobs to all team members in KNIME Business Hub prior to version 1.16.0.
Who is affected by CVE-2025-11239?
Users of KNIME Business Hub versions prior to 1.16.0 are affected by CVE-2025-11239 due to the inappropriate exposure of sensitive job information.
What changes were made in KNIME Business Hub 1.16.0 regarding CVE-2025-11239?
In KNIME Business Hub 1.16.0, only job metadata is shown to team members, while full job details remain accessible only to the job creator.