Medium severity · published Oct 22, 2026
CVE-2026-115517
Unrestricted network access between execution contexts in KNIME Business Hub
New
6.4
CVSS
0.4%
EPSS
No
On KEV
Description
Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution contexts. This only poses a security issue if the IP address of the attacked executor is know and there are open network ports that provided access without further authentication. By default no network ports are open. However, depending on the running workflows, ports may be opened and provide an attack surface. As a workaround, network policies can be created manually.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KB
KNIME Business Hub · KNIME
before 1.19.0 · source: vendor
Affected product
KB
KNIME Business Hub
KNIME
More from KNIME Business Hub
7.2
CVE-2025-11240
Open redirect vulnerability in KNIME Business Hub
6.9
CVE-2026-115496
Workflow names may be leaked to unauthenticated users in KNIME Business Hub
6.3
CVE-2026-115502
DataApp links without login expose job information to other user in KNIME Business Hub
5.3
CVE-2026-115494
CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub
5.3
CVE-2026-115454
Large tables in data apps can bring down execution services in KNIME Hub