Session Compromise Vulnerability in KNIME Business Hub from KNIME
CVE-2026-115519

2.1LOW

Key Information:

Vendor

Knime

Status
Knime Business Hub
Vendor
CVE Published:
22 October 2026

What is CVE-2026-115519?

The security of KNIME Business Hub prior to version 1.19.0 is jeopardized due to missing security attributes on sensitive cookies. This flaw allows an unauthenticated remote attacker to potentially compromise user sessions, especially in conjunction with other vulnerabilities like cross-site scripting or man-in-the-middle attacks. This vulnerability poses a significant risk as it does not allow for an effective workaround, necessitating an upgrade to the latest version for a secure environment.

Affected Version(s)

KNIME Business Hub 0 < 1.19.0

KNIME Business Hub 1.19.0

References

https://www.knime.com/security/advisories

CVSS V4

Score:
2.1
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Zigrin Security
.