Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-115496 EUVD-2026-108224GHSA-3r26-xcjp-g4f6

Workflow names may be leaked to unauthenticated users in KNIME Business Hub

Published Oct 22, 2026 · Updated Oct 22, 2026 · Assigned by KNIME

Description

Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible.

Affected products

VendorProductAffectedFixed
KNIME KNIME Business Hub < 1.18.4 1.18.4

References