CVE-2026-115454: Large tables in data apps can bring down execution services in KNIME Hub

Q: Who can exploit this issue?

An attacker must be authenticated and able to use the remote workflow editing capabilities of KNIME Business Hub.

Q: What operational impact should teams expect?

Successful exploitation can exhaust server-side resources and cause intermittent unavailability of workflow execution functionality.

Q: Which deployments are affected?

KNIME Business Hub versions prior to 1.19.0 are affected.

Published Oct 22, 2026

Updated

An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a authenticated attack to exhaust resources on the server side. This leads to intermittent unavailability of workflow execution functionality. A workaround is not possible.

Affected Software

1 affected component

KNIME Business Hub<1.19.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade KNIME Business Hub to a version that resolves this vulnerability.
Fixed in 1.19.0

Event History

Oct 22, 2026

CVE Published

via MITRE·03:25 PM

Data Sourced

via MITRE·03:25 PM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker must be authenticated and able to use the remote workflow editing capabilities of KNIME Business Hub.

What operational impact should teams expect?

Successful exploitation can exhaust server-side resources and cause intermittent unavailability of workflow execution functionality.

Which deployments are affected?

KNIME Business Hub versions prior to 1.19.0 are affected.

Is there a mitigation if upgrading is not immediately possible?

No workaround is available.