What is CVE-2025-2787?

CVE-2025-2787 is a high-severity vulnerability in Knime Business Hub, classified under Code Injection. CVSS score: 8.8/10. Published 2025-03-26.

How severe is CVE-2025-2787?

High severity. CVSS v3 base score is 8.8 out of 10.

Is CVE-2025-2787 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Knime Business Hub

CVE-2025-2787

KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component. In the worst case a complete takeover of the Kubernetes cluster is possible. Since the affected component is only reachable from within the cluster, i.e. requires an authenticated user, the severity in the context of KNIME Business Hub is slightly lower. Besides applying the publicly known workarounds, we strongly recommend updating to one of the following versions of KNIME Business Hub: * 1.13.3 or above * 1.12.4 or above * 1.11.4 or above * 1.10.4 or above *

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.005 (39.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Knime Business_hub
Knime Business Hub — versions 1.13.0, 1.12.0, 1.11.0

Weakness classification (CWE)

CWE-94 — Code Injection

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

security@knime.com (Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2025-2787?: CVE-2025-2787 is a high-severity vulnerability in Knime Business Hub, classified under Code Injection. CVSS score: 8.8/10. Published 2025-03-26.
How severe is CVE-2025-2787?: High severity. CVSS v3 base score is 8.8 out of 10.
Is CVE-2025-2787 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.