---
id: CVE-2025-11239
title: >-
  Potentially sensitive information in jobs on KNIME Business Hub prior to
  1.16.0 were visible to all members of the user's team
summary: >-
  Potentially sensitive information in jobs on KNIME Business Hub prior to
  1.16.0 were visible to all members of the user's team. Starting with KNIME
  Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the
  creator of a…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-863
vendor: knime
product: business_hub
affected:
  - business_hub < 1.16.0
patched:
  - business_hub 1.16.0
published: '2025-10-02'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T15:10:00.207'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-11239'
references:
  - url: 'https://www.knime.com/security/advisories'
    label: security@knime.com
tags:
  - nvd
epss: 0.00206
epssPercentile: 0.09774
ingestedAt: '2026-10-12T15:55:08.078Z'
---

## Overview

Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data (if present).

## Affected

- `business_hub < 1.16.0`

## Remediation

Upgrade past the affected range:

- `business_hub 1.16.0`