Information Disclosure Vulnerability in KNIME Business Hub by KNIME Inc.
CVE-2026-115496

6.9MEDIUM

Key Information:

Vendor

Knime

Status
Knime Business Hub
Vendor
CVE Published:
22 October 2026

What is CVE-2026-115496?

In KNIME Business Hub prior to version 1.18.5, overly informative error messages within the catalog functionality can potentially allow an authenticated remote attacker to expose workflow names if the ID is known. This vulnerability does not provide an available workaround, making it a significant concern for users who must safeguard their workflow information.

Affected Version(s)

KNIME Business Hub 0 < 1.18.4

KNIME Business Hub 1.18.5

References

https://www.knime.com/security/advisories

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Zigrin Security
.