Remote Workflow Editing Resource Exhaustion in KNIME Business Hub
CVE-2026-115454

5.3MEDIUM

Key Information:

Vendor

Knime

Vendor
CVE Published:
22 October 2026

What is CVE-2026-115454?

A resource exhaustion vulnerability has been identified in KNIME Business Hub that affects the remote workflow editing capabilities. When exploited by an authenticated attacker, this vulnerability can lead to excessive consumption of server resources, resulting in intermittent unavailability of essential workflow execution functionalities. Given the nature of the vulnerability, implementing a workaround is not feasible, underscoring the need for immediate attention to upgrade to version 1.19.0 or later to mitigate risks.

Affected Version(s)

KNIME Business Hub 0 < 1.19.0

KNIME Business Hub 1.19.0

References

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.