---
id: CVE-2026-115454
title: Large tables in data apps can bring down execution services in KNIME Hub
summary: >-
  An excessive resource allocation issue in the remote workflow editing
  capabilities of KNIME Business Hub prior to version 1.19.0 allows a
  authenticated attack to exhaust resources on the server side. This leads to
  intermittent unavailabi…
severity: medium
cvss: 5.3
cvssVector: >-
  CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/AU:Y/R:A/U:Green
cvssSource: cna
cwe:
  - CWE-770
vendor: KNIME
product: KNIME Business Hub
affected:
  - business_hub < 1.19.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-22T18:34:02.982941Z'
published: '2026-10-22'
updated: '2026-10-22'
sourceUpdated: '2026-10-22T19:00:31.252Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-115454'
references:
  - url: 'https://www.knime.com/security/advisories'
tags:
  - cve.org
ingestedAt: '2026-10-22T22:00:50.373Z'
---

## Overview

An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a authenticated attack to exhaust resources on the server side. This leads to intermittent unavailability of workflow execution functionality. A workaround is not possible.

## Affected

- `business_hub < 1.19.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.