VYPR
← All advisories
Medium severity6.5OSV Advisory· Published Jan 7, 2026· Updated Jun 17, 2026

CVE-2025-58441

CVE-2025-58441

Description

Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-side request forgery vulnerability. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact of this vulnerability is limited. However, an attacker should be able to leverage this vulnerability to scan the internal network. This issue has been patched in version 8.1.37.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Knowagelabs/Knowage ServerOSV2 versions
    v7.0.0-RC, v7.2.0, v7.2.0-2020-04-06, …+ 1 more
    • (no CPE)range: v7.0.0-RC, v7.2.0, v7.2.0-2020-04-06, …
    • (no CPE)range: <8.1.37
  • Eng/Knowage
    cpe:2.3:a:eng:knowage:*:*:*:*:*:*:*:*
    Range: <8.1.37
  • Knowagelabs/Knowagellm-fuzzy
    Range: <8.1.37

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.