Vulnerability Description
A missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially access jobs of other users created by the same link in KNIME Business Hub prior to 1.19.0. As workaround remove all "links without login" to DataApps.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-115502?
CVE-2026-115502 is a documented vulnerability. A missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially access jobs of other users created by the same link in KNIME Business Hub prio...
How severe is CVE-2026-115502?
CVSS scoring is not yet available for CVE-2026-115502. Check NVD for updates.
Is there a patch for CVE-2026-115502?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.