CVE-2026-115496 — Workflow names may be leaked to unauthenticated users in KNIME Business Hub

CVE-2026-115496

Workflow names may be leaked to unauthenticated users in KNIME Business Hub PUBLISHED

Description (CNA)

Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible.

Affected (CNA)

Vendor / product	Versions
KNIME / KNIME Business Hub	affected 0 before 1.18.4; unaffected 1.18.5

CWE

CWE-209

References

https://www.knime.com/security/advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.