CVE-2025-2402
Last modified
CVE-2025-2402 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. A hard-coded, non-random password for the object store (minio) of KNIME Business Hub in all versions except the ones listed below allows an unauthenticated remote attacker in possession of the password to read and manipulate swapped jobs or read and manipulate in- and output data of active jobs. It is also possible to cause a denial-of-service of most functionality of KNIME Business Hub by writing large amounts of data to the object store directly. EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
A hard-coded, non-random password for the object store (minio) of KNIME Business Hub in all versions except the ones listed below allows an unauthenticated remote attacker in possession of the password to read and manipulate swapped jobs or read and manipulate in- and output data of active jobs. It is also possible to cause a denial-of-service of most functionality of KNIME Business Hub by writing large amounts of data to the object store directly. There are no viable workarounds therefore we strongly recommend to update to one of the following versions of KNIME Business Hub: * 1.13.2 or later * 1.12.3 or later * 1.11.3 or later * 1.10.3 or later
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Amber
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Knime | Business Hub | < 1.10.3 |
| Knime | Business Hub | >= 1.11.0, < 1.11.3 |
| Knime | Business Hub | >= 1.12.0, < 1.12.3 |
| Knime | Business Hub | >= 1.13.0, < 1.13.2 |
References
- https://www.knime.com/security/advisories#CVE-2025-2402Vendor Advisory
- https://github.com/advisories/GHSA-v5p7-3387-gpmgThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-2402?
How severe is CVE-2025-2402?
How do I fix CVE-2025-2402?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-24014Vim is an open source, command line text editor. A segmentat…5.5
- CVE-2025-24015Deno is a JavaScript, TypeScript, and WebAssembly runtime. V…5.3
- CVE-2025-24016Wazuh is a free and open source platform used for threat pre…9.9
- CVE-2025-24017YesWiki is a wiki system written in PHP. Versions up to and …6.1
- CVE-2025-24018YesWiki is a wiki system written in PHP. In versions up to a…5.4
- CVE-2025-24019YesWiki is a wiki system written in PHP. In versions up to a…7.1
- CVE-2025-24020WeGIA is a Web manager for charitable institutions. An Open …6.1
- CVE-2025-24021iTop is an web based IT Service Management tool. Prior to ve…5
- CVE-2025-24022iTop is an web based IT Service Management tool. Prior to ve…8.5
- CVE-2025-24023Flask-AppBuilder is an application development framework. Pr…5.3
- CVE-2025-24024Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 resp…9.1
- CVE-2025-24025Coolify is an open-source and self-hostable tool for managin…6.1
Are you affected by CVE-2025-2402?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST