p PatchFirst

CVE-2026-115454

CVE-2026-115454 · Large tables in data apps can bring down execution services in KNIME Hub

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a authenticated attack to exhaust resources on the server side. This leads to intermittent unavailability of workflow execution functionality. A workaround is not possible.

CVSS 5.3 · Medium · EPSS 0.4% · Fix available

Published
Updated

Affected products and versions

  • knime business hub

    Versions
    • ≥ 0, < 1.19.0: Affected (semver)
    • 1.19.0: Not affected (semver)

    Update to 1.19.0

Original sources

Check your server →