Auth bypass in Knime Business Hub

CVE-2025-11239

Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a j…

Vulnerability class: Broken Access Control

EPSS: 0.000 (11.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References