CVE-2026-115502

CVE-2026-115502CVE-2026-115502

Description

A missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially access jobs of other users created by the same link in KNIME Business Hub prior to 1.19.0. As workaround remove all "links without login" to DataApps.

Scoring

Last modified2026-10-22
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.