Live › vulnerability › CVE-2026-115496
Go to dashboardKNIME Business Hub versions before 1.18.5 return overly detailed error messages from the catalog functionality. An authenticated remote attacker who knows a workflow's ID can learn that workflow's name.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
KNIME Business Hub installations before 1.18.5 with the catalog functionality in use. The attacker must hold a valid account and already know the workflow ID. Instances already on 1.18.5 or later are not affected.
No product ranges from the sources yet.
1.18.51.18.5 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible.
This page as .md · .json · in your agent: get_signal("CVE-2026-115496")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.