Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-115496

Workflow names may be leaked to unauthenticated users in KNIME Business Hub

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
KNIME

Description

Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

KNIME KNIME Business Hub

Default version status: unaffected

  • 0 to < 1.18.4affected
  • 1.18.5unaffected

References