{"id":"CVE-2026-115502","kind":"vulnerability","aliases":["CVE-2026-115502"],"related":[],"title":"KNIME Business Hub: DataApp share links expose other users' jobs","description":"A missing authorization check allows anyone having access to a \"link without login\" for a DataApp to list and potentially access jobs of other users created by the same link in KNIME Business Hub prior to 1.19.0. As workaround remove all \"links without login\" to DataApps.","summary":"A missing authorization check in KNIME Business Hub before 1.19.0 lets anyone holding a 'link without login' for a DataApp list and potentially access jobs of other users created through the same link. An attacker with such a link can see another user's job data.","severity":"medium","cvss":6.3,"epss":0.00277,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["data-apps","knime","knime-business-hub","self-hosted","vendor"],"not_affected_if":["auth-required","default-config"],"how_to_check":"- Check the installed KNIME Business Hub version against `1.19.0`\n- Review whether any DataApps have 'link without login' sharing enabled in the Business Hub admin or DataApp settings","fix":"- Upgrade KNIME Business Hub to `1.19.0` or later\n- Until patched, remove all 'links without login' to DataApps, as the source advises","status":"open","published_at":"2026-10-22T17:16:59+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","triaged_at":"2026-10-25T04:01:16+00:00","updated_at":"2026-10-25T04:01:16+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T04:01:16Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade KNIME Business Hub to `1.19.0` or later\n- Until patched, remove all 'links without login' to DataApps, as the source advises","reach":"internet","title":"KNIME Business Hub: DataApp share links expose other users' jobs","impact":"medium","summary":"A missing authorization check in KNIME Business Hub before 1.19.0 lets anyone holding a 'link without login' for a DataApp list and potentially access jobs of other users created through the same link. An attacker with such a link can see another user's job data.","category":"vendor","nicknames":[],"who_cares":["knime","knime-business-hub","self-hosted","data-apps"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker reads other users' DataApp job data via shared link","analyst_note":"Confirm the affected version range and whether the fix is in 1.19.0 using the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-115502 and the vendor advisory it links to.","how_to_check":"- Check the installed KNIME Business Hub version against `1.19.0`\n- Review whether any DataApps have 'link without login' sharing enabled in the Business Hub admin or DataApp settings","needs_analyst":true,"not_affected_if":["default-config","auth-required"],"who_is_affected":"Teams running KNIME Business Hub before 1.19.0 that have shared DataApps through links that do not require login. Installations with no such links exposed are not reachable through this flaw, according to the workaround advice.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000618,"input_tokens":3334,"output_tokens":570,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-115502':13A,16A '-2026':12A,15A '1.19.0':38B,111C 'access':52B,82C,95C 'allow':79C 'anoth':70B 'anyon':40B,80C 'app':19B 'attack':63B 'author':31B,77C 'busi':2A,23B,35B,107C 'check':32B,78C 'creat':57B,100C 'cve':11A,14A 'data':18B,74B 'data-app':17B 'dataapp':4A,48B,90C,120C 'expos':7A 'hold':41B 'host':27B 'hub':3A,24B,36B,108C 'job':10A,53B,73B,96C 'knime':1A,20B,22B,34B,106C 'knime-business-hub':21B 'let':39B 'link':6A,43B,61B,67B,85C,104C,116C 'list':49B,92C 'login':45B,87C,118C 'miss':30B,76C 'potenti':51B,94C 'prior':109C 'remov':114C 'see':69B 'self':26B 'self-host':25B 'share':5A 'user':9A,56B,71B,99C 'vendor':28B 'without':44B,86C,117C 'workaround':113C","nicknames":[],"mitigations":[],"who_affected":"Teams running KNIME Business Hub before 1.19.0 that have shared DataApps through links that do not require login. Installations with no such links exposed are not reachable through this flaw, according to the workaround advice.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T17:16:59+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"security@knime.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115502","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115502","severity":null,"published_at":"2026-10-22T17:16:59+00:00","modified_at":"2026-10-22T19:17:48+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115502","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115502","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}