Read the docs
TI-2026-79312 Aliases CVE-2026-115496GHSA-3r26-xcjp-g4f6

Error messages leak workflow names to users in KNIME Business Hub

Priority LOW 37CWE-209Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-209.

Summary

KNIME Business Hub from 0 before 1.18.4 returns overly informative error messages in its catalog functionality, classified as CWE-209. An authenticated remote attacker who knows a workflow's ID can see the workflow's name.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00401 34th percentileScored 2026-11-07
Fix Fixed KNIME Business Hub (KNIME): 1.18.4, 1.18.5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
KNIMEKNIME Business Hubbefore 1.18.41.18.4, 1.18.5Patch availableCNA
  • KNIME Business Hub VendorKNIME Affected before 1.18.4 Fixed in 1.18.4, 1.18.5 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:*——KNIME
  • cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:* Versions — — ·KNIME

Remediation

Upgrade KNIME Business Hub to version 1.18.4 or 1.18.5, which are the listed fixed versions. No workaround is possible.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA KNIME Business Hub (KNIME) Fixed in 1.18.4, 1.18.5

Timeline

  1. 2026-10-22 Threatist record created from CVE-2026-115496
  2. 2026-10-22 CISA SSVC decision points changed
  3. 2026-10-22 Priority changed: MEDIUM → LOW
  4. 2026-10-22 Alias added: GHSA-3r26-xcjp-g4f6

References

Other 1

  • TI-2026-79492 Incorrect authorization exposes accounts in KNIME Business Hub SaaS CVSS 4.0MEDIUM 6.9
  • TI-2025-02116 Hard-coded password for object store of KNIME Business Hub CVSS 4.0HIGH 8.8
  • TI-2025-02436 Ingress-nginx vulnerability in KNIME Business Hub CVSS 4.0HIGH 8.7
  • TI-2021-20243 KNIME Server before 4.13.4 allows XSS via the old WebPortal login page. CVSS 3.1HIGH 8.8
  • TI-2022-22037 Uploading workflows to KNIME Server may override arbitrary file system contents CVSS 3.1HIGH 7.5
  • TI-2021-20242 KNIME Server before 4.13.4 allows directory traversal in a request for a client profile. CVSS 3.1HIGH 7.5
See all 25 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences