{"id":"CVE-2026-115454","kind":"vulnerability","aliases":["CVE-2026-115454"],"related":[],"title":"KNIME Business Hub: authenticated users can exhaust server resources via workflow editing","description":"An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a authenticated attack to exhaust resources on the server side. This leads to intermittent unavailability of workflow execution functionality. A workaround is not possible.","summary":"KNIME Business Hub before 1.19.0 has an excessive resource allocation flaw in its remote workflow editing features. An authenticated user can exhaust server resources, making workflow execution intermittently unavailable.","severity":"medium","cvss":5.3,"epss":0.00365,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["knime","other","self-hosted","workflow-automation"],"not_affected_if":["patched-version"],"how_to_check":"- Check the installed KNIME Business Hub version and compare it against `1.19.0`\n- unknown","fix":"- Upgrade KNIME Business Hub to `1.19.0` or later\n- No workaround is available according to the sources","status":"open","published_at":"2026-10-22T16:17:35+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","triaged_at":"2026-10-25T04:20:19+00:00","updated_at":"2026-10-25T04:20:19+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-25T04:20:19Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade KNIME Business Hub to `1.19.0` or later\n- No workaround is available according to the sources","reach":"network","title":"KNIME Business Hub: authenticated users can exhaust server resources via workflow editing","impact":"low","summary":"KNIME Business Hub before 1.19.0 has an excessive resource allocation flaw in its remote workflow editing features. An authenticated user can exhaust server resources, making workflow execution intermittently unavailable.","category":"other","nicknames":[],"who_cares":["knime","self-hosted","workflow-automation"],"confidence":0.6,"needs_auth":"yes","worst_case":"Workflow execution becomes intermittently unavailable due to resource exhaustion","analyst_note":"","how_to_check":"- Check the installed KNIME Business Hub version and compare it against `1.19.0`\n- unknown","needs_analyst":false,"not_affected_if":["patched-version"],"who_is_affected":"Teams running self-managed KNIME Business Hub versions before 1.19.0 where users have accounts that can edit workflows remotely. The sources do not say whether managed or hosted deployments are affected. Installations on 1.19.0 or later are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000566,"input_tokens":3355,"output_tokens":460,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-115454':15A,18A '-2026':14A,17A '1.19.0':31B,74C 'alloc':36B,59C 'allow':75C 'attack':78C 'authent':4A,45B,77C 'autom':26B 'busi':2A,28B,69C 'capabl':66C 'cve':13A,16A 'edit':12A,42B,65C 'excess':34B,57C 'execut':53B,93C 'exhaust':7A,48B,80C 'featur':43B 'flaw':37B 'function':94C 'host':23B 'hub':3A,29B,70C 'intermitt':54B,89C 'issu':60C 'knime':1A,19B,27B,68C 'lead':87C 'make':51B 'possibl':99C 'prior':71C 'remot':40B,63C 'resourc':9A,35B,50B,58C,81C 'self':22B 'self-host':21B 'server':8A,49B,84C 'side':85C 'unavail':55B,90C 'user':5A,46B 'version':73C 'via':10A 'workaround':96C 'workflow':11A,25B,41B,52B,64C,92C 'workflow-autom':24B","nicknames":[],"mitigations":[],"who_affected":"Teams running self-managed KNIME Business Hub versions before 1.19.0 where users have accounts that can edit workflows remotely. The sources do not say whether managed or hosted deployments are affected. Installations on 1.19.0 or later are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T16:17:35+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:X/U:Green","cvss_by":"security@knime.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115454","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115454","severity":null,"published_at":"2026-10-22T16:17:35+00:00","modified_at":"2026-10-22T19:17:47+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115454","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115454","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}