Unrestricted Network Access Vulnerability in KNIME Business Hub by KNIME

CVE-2026-115517

What is CVE-2026-115517?

Unrestricted network access between execution contexts in KNIME Business Hub prior to version 1.19.0 enables authenticated remote users to connect to open network ports on executors across different execution contexts. This poses a security risk when the specific IP address of the targeted executor is known, and if the associated network ports are accessible without additional authentication barriers. Although no ports are open by default, certain workflows might expose ports, creating potential attack vectors. Users are advised to implement manual network policies as a preventive measure.

References