A vulnerability identified as critical has been detected in KNIME Business Hub up to 1.16.x. The affected element is an unknown function of the component Catalog Service. Performing manipulation results in incorrect ownership assignment.

This vulnerability is identified as CVE-2025-14262. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.