{"id":"CVE-2026-115496","kind":"vulnerability","aliases":["CVE-2026-115496"],"related":[],"title":"KNIME Business Hub: verbose catalog errors reveal workflow names to users","description":"Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible.","summary":"KNIME Business Hub versions before 1.18.5 return overly detailed error messages from the catalog functionality. An authenticated remote attacker who knows a workflow's ID can learn that workflow's name.","severity":"medium","cvss":6.9,"epss":0.00401,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["knime","knime-business-hub","other","self-hosted"],"not_affected_if":["version-1.18.5-or-later"],"how_to_check":"- Check the installed KNIME Business Hub version against `1.18.5`\n- unknown","fix":"- Upgrade KNIME Business Hub to `1.18.5` or later\n- The sources say no workaround is possible","status":"open","published_at":"2026-10-22T16:17:35+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","triaged_at":"2026-10-25T03:38:54+00:00","updated_at":"2026-10-25T03:38:54+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-25T03:38:54Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade KNIME Business Hub to `1.18.5` or later\n- The sources say no workaround is possible","reach":"network","title":"KNIME Business Hub: verbose catalog errors reveal workflow names to users","impact":"low","summary":"KNIME Business Hub versions before 1.18.5 return overly detailed error messages from the catalog functionality. An authenticated remote attacker who knows a workflow's ID can learn that workflow's name.","category":"other","nicknames":[],"who_cares":["knime","knime-business-hub","self-hosted"],"confidence":0.6,"needs_auth":"yes","worst_case":"Authenticated attacker learns workflow names when IDs are known","analyst_note":"","how_to_check":"- Check the installed KNIME Business Hub version against `1.18.5`\n- unknown","needs_analyst":false,"not_affected_if":["version-1.18.5-or-later"],"who_is_affected":"KNIME Business Hub installations before 1.18.5 with the catalog functionality in use. The attacker must hold a valid account and already know the workflow ID. Instances already on 1.18.5 or later are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000553,"input_tokens":3331,"output_tokens":439,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-115496':14A,17A '-2026':13A,16A '1.18.5':32B,73C 'allow':75C 'attack':45B,79C 'authent':43B,77C 'busi':2A,21B,28B,68C 'catalog':5A,40B,64C 'cve':12A,15A 'detail':35B 'error':6A,36B,60C 'function':41B,65C 'host':26B 'hub':3A,22B,29B,69C 'id':51B,86C 'inform':59C 'knime':1A,18B,20B,27B,67C 'knime-business-hub':19B 'know':47B 'known':88C 'learn':53B 'may':74C 'messag':37B,61C 'name':9A,57B,83C 'over':34B,58C 'possibl':93C 'prior':70C 'remot':44B,78C 'return':33B 'reveal':7A 'see':81C 'self':25B 'self-host':24B 'user':11A 'verbos':4A 'version':30B,72C 'workaround':90C 'workflow':8A,49B,55B,82C","nicknames":[],"mitigations":[],"who_affected":"KNIME Business Hub installations before 1.18.5 with the catalog functionality in use. The attacker must hold a valid account and already know the workflow ID. Instances already on 1.18.5 or later are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T16:17:35+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"security@knime.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115496","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115496","severity":null,"published_at":"2026-10-22T16:17:35+00:00","modified_at":"2026-10-22T19:17:48+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115496","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115496","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}