Credential Logging Vulnerability in KNIME Analytics Platform by KNIME
CVE-2026-115657

4.8MEDIUM

Key Information:

Vendor

Knime

Status
Knime Analytics Platform
Vendor
CVE Published:
23 October 2026

What is CVE-2026-115657?

The KNIME Analytics Platform and KNIME Business Hub have a vulnerability where configured proxy credentials are logged during startup. This exposes sensitive information to unauthorized individuals who gain access to the log files. Attackers could exploit this information to impersonate the user who configured the proxy settings. Users are advised to upgrade to LTS versions 5.8.4 or later to ensure their system is secured against this logging issue.

Affected Version(s)

KNIME Analytics Platform 5.12.0

KNIME Analytics Platform 5.12.0

KNIME Analytics Platform 5.8.4 < 5.9.0

References

https://www.knime.com/security/advisories

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.