Live › vulnerability › CVE-2026-115454
Go to dashboardKNIME Business Hub before 1.19.0 has an excessive resource allocation flaw in its remote workflow editing features. An authenticated user can exhaust server resources, making workflow execution intermittently unavailable.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running self-managed KNIME Business Hub versions before 1.19.0 where users have accounts that can edit workflows remotely. The sources do not say whether managed or hosted deployments are affected. Installations on 1.19.0 or later are not affected.
No product ranges from the sources yet.
1.19.01.19.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a authenticated attack to exhaust resources on the server side. This leads to intermittent unavailability of workflow execution functionality. A workaround is not possible.
This page as .md · .json · in your agent: get_signal("CVE-2026-115454")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.