CVE-2026-115496

UNKNOWN 0.0

Workflow names may be leaked to unauthenticated users in KNIME Business Hub

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible.

CWE	CWE-209
Vendor	knime
Product	knime business hub
Published	Oct 22, 2026

Stay Ahead of the Next One

Get instant alerts for knime knime business hub

Be the first to know when new unknown vulnerabilities affecting knime knime business hub are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

KNIME / KNIME Business Hub

0 < 1.18.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

knime.com: https://www.knime.com/security/advisories

Credits

Zigrin Security