CVE-2026-115517
Unrestricted network access between execution contexts in KNIME Business Hub
KNIME KNIME Business Hub
CVSS
6.4MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.43%Chance of exploitation activity in the next 30 days, higher than 36% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 1.19.0KNIME Business HubCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution contexts. This only poses a security issue if the IP address of the attacked executor is know and there are open network ports that provided access without further authentication. By default no network ports are open. However, depending on the running workflows, ports may be opened and provide an attack surface. As a workaround, network policies can be created manually.
Text from CVE List
Affected versions 2
- KNIME Business Hubaffected: all versions before 1.19.0CVE List
- KNIME Business Hubunaffected: 1.19.0CVE List