Critical severity · published Sep 29, 2025
CVE-2025-59954
Knowage Contains a Remote Code Execution Vulnerability
9.8
CVSS
0.5%
EPSS
No
On KEV
Description
Knowage is an open source analytics and business intelligence suite. Versions 8.1.26 and below are vulnerable to Remote Code Exection through using an unsafe org.apache.commons.jxpath.JXPathContext in MetaService.java service. This issue is fixed in version 8.1.27.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KN
Knowage-Server · KnowageLabs
< 8.1.27 · source: vendor
KN
Knowage · Eng
before 8.1.27 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-59954
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-59954
Patch
https://github.com/KnowageLabs/Knowage-Server/commit/1bb60d42557724f7ed24c19df6c5017e169527ca
Exploit
https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-96cv-75hg-xrgq
More from Knowage-Server
6.5
CVE-2025-58441
Knowage is vulnerable to blind server-side request forgery (SSRF)
6.1
CVE-2022-39295
Improper Neutralization of Alternate XSS Syntax in Knowage-Server
5.3
CVE-2025-55007
Knowage vulnerable to server-side request forgery