CVE-2026-115517
Description
Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution contexts. This only poses a security issue if the IP address of the attacked executor is know and there are open network ports that provided access without further authentication. By default no network ports are open. However, depending on the running workflows, ports may be opened and provide an attack surface. As a workaround, network policies can be created manually.
Is your site exposed to CVE-2026-115517?
Run a free security scan — no signup, results in seconds.
Weakness Type (CWE)
References
Other References
Frequently Asked Questions
What is CVE-2026-115517? +
How do I check if I'm vulnerable to CVE-2026-115517? +
Related Vulnerabilities
In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write …
Enabled IP Forwarding feature in B&R Automation Runtime versions before 6.0.2 may allow remote attack-ers to compromise network security by …
When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using …
A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly …
When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using …
An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an …