KNIME has 10 CVEs on record between 2025 and 2026. Disclosure cadence is accelerating: 7 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 7. The median CVSS is 5.8 (medium). None have a confirmed exploitation report. Most affected products: KNIME Business Hub (6), business_hub (3), KNIME Business Hub SaaS (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.8
- Publish → KEV
- —
- Last 90 days
- 7 prev 0
Weakness classes
Products
- KNIME Business Hub 6
- business_hub 3
- KNIME Business Hub SaaS 1
Worst active — by depth score
CVE-2025-11240High· 7.2An open redirect vulnerability existed in KNIME Business Hub prior to version 1.16.040CVE-2026-115516Medium· 6.9Basic account information visible to unauthenticated user in Business Hub SaaS38CVE-2026-115496Medium· 6.9Workflow names may be leaked to unauthenticated users in KNIME Business Hub38CVE-2026-115517Medium· 6.4Unrestricted network access between execution contexts in KNIME Business Hub35CVE-2026-115502Medium· 6.3DataApp links without logging expose job information to other user in KNIME Business Hub35
KNIME vulnerabilities
CVEs affecting KNIME, newest first. Open any entry for full detail, references, and exploit status.
10 CVEsRSS
CVE-2026-115494Medium· 5.3CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub
A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user interaction. This means the state of a resource could be…
CVE-2026-115454Medium· 5.3Large tables in data apps can bring down execution services in KNIME Hub
An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a authenticated attack to exhaust resources on the server side. This leads to intermittent unavailabi…
CVE-2026-115502Medium· 6.3DataApp links without logging expose job information to other user in KNIME Business Hub
A missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially access jobs of other users created by the same link in KNIME Business Hub prior to 1.19.0. As workaround remove all…
CVE-2026-115496Medium· 6.9Workflow names may be leaked to unauthenticated users in KNIME Business Hub
Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible.
CVE-2026-115519Low· 2.1Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub
Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a …
CVE-2026-115517Medium· 6.4Unrestricted network access between execution contexts in KNIME Business Hub
Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution contexts. This only poses a security …
CVE-2026-115516Medium· 6.9Basic account information visible to unauthenticated user in Business Hub SaaS
An incorrect authorization issue exposes basic account information to unauthorized remote users in KNIME Business Hub SaaS before version 1.19.0. A workaround is not possible. The same behaviour is present in on-premise KNIME Business H…
CVE-2025-14262Medium· 4.3A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job owner
A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job owner. The attacker must have permissions to access the jobs but then they w…
CVE-2025-11240High· 7.2An open redirect vulnerability existed in KNIME Business Hub prior to version 1.16.0
An open redirect vulnerability existed in KNIME Business Hub prior to version 1.16.0. An unauthenticated remote attacker could craft a link to a legitimate KNIME Business Hub installation which, when opened by the user, redirects the use…
CVE-2025-11239Medium· 4.3Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team
Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a…