PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-115496 KNIME CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-22T15:56:48.222Z and has not been modified since then. This vulnerability affects KNIME Business Hub, specifically versions prior to 1.18.5, where overly informative error messages in the catalog functionality may allow an authenticated remote attacker to see workflow names if their ID is known. Defenders should assess exposure and potential impact, focusing on verifying exposure in deployments and evaluating the security implications of potential workflow name leakage.

Vendor
KNIME
Product
KNIME Business Hub
CVSS
MEDIUM 6.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-22
Original CVE updated
2026-10-22
Advisory published
2026-10-22
Advisory updated
2026-10-22

Who should care

Defenders responsible for KNIME Business Hub deployments, especially those with versions prior to 1.18.5, should assess exposure and potential impact.

Why it matters

Defenders should prioritize verifying exposure in KNIME Business Hub deployments, especially for versions prior to 1.18.5, and assess the impact of potential workflow name leakage.

  • Verification of exposure in KNIME Business Hub deployments
  • Potential leakage of workflow names
  • Assessment of impact on workflow security

Technical summary

Overly informative error messages in KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. This issue is particularly relevant for defenders responsible for KNIME Business Hub deployments, as they need to assess exposure and the potential impact of workflow name leakage. The vulnerability highlights the importance of securing error messages to prevent unauthorized information disclosure.

Defensive priority

Defenders should prioritize verifying exposure in KNIME Business Hub deployments, especially for versions prior to 1.18.5, and assess the impact of potential workflow name leakage.

Recommended defensive actions

  • Verify KNIME Business Hub version and update to 1.18.5 or later if necessary
  • Restrict access to workflow IDs and names
  • Monitor for potential leakage of workflow names

Evidence notes

The CVE record and source item indicate that overly informative error messages in KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-115496 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-115496

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-115496 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-115496

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.