---
id: "CVE-2026-115454"
kind: "vulnerability"
aliases: ["CVE-2026-115454"]
title: "KNIME Business Hub: authenticated users can exhaust server resources via workflow editing"
severity: "medium"
cvss: 5.3
epss: 0.00365
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["knime", "other", "self-hosted", "workflow-automation"]
not_affected_if: ["patched-version"]
published_at: "2026-10-22T16:17:35+00:00"
first_seen_at: "2026-10-23T21:57:31+00:00"
updated_at: "2026-10-25T04:20:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-115454", "first_seen_at": "2026-10-23T21:57:31+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-115454", "first_seen_at": "2026-10-24T07:15:51+00:00"}]
---

# KNIME Business Hub: authenticated users can exhaust server resources via workflow editing

KNIME Business Hub before 1.19.0 has an excessive resource allocation flaw in its remote workflow editing features. An authenticated user can exhaust server resources, making workflow execution intermittently unavailable.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed KNIME Business Hub version and compare it against `1.19.0`
- unknown

## Fix

- Upgrade KNIME Business Hub to `1.19.0` or later
- No workaround is available according to the sources

## Timeline

- 2026-10-23T21:57:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-115454
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-115454

## From the sources

An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a authenticated attack to exhaust resources on the server side. This leads to intermittent unavailability of workflow execution functionality. A workaround is not possible.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_