Authorization Issues in KNIME Business Hub SaaS
CVE-2026-115516

6.9MEDIUM

Key Information:

Vendor

Knime

Status
Knime Business Hub Saas
Vendor
CVE Published:
22 October 2026

What is CVE-2026-115516?

An authorization flaw in KNIME Business Hub SaaS allows unauthorized remote users to access basic account information prior to version 1.19.0. While on-premise installations retain similar behavior to facilitate collaborative work in secure local environments, they are configurable to disable the sharing of basic account details if necessary. Importantly, no sensitive information is disclosed that isn't already known within the organization.

Affected Version(s)

KNIME Business Hub SaaS 0 < 1.19.0

KNIME Business Hub SaaS 1.19.0

References

https://www.knime.com/security/advisories

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.