Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-115494— CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub

Quick assessment

Affected
KNIME KNIME Business Hub
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

KNIME Business Hub 在 1.19.0 版本之前存在跨站请求伪造（CSRF）防护缺陷，使得已认证的攻击者能够在用户无意识参与的情况下发起 CSRF 攻击。这意味着资源的当前状态可能在用户不知情的情况下被篡改。作为临时缓解措施，可在 KNIME Business Hub 前部署防火墙 API 网关，从所有传入请求中移除 X-Forwarded-For 请求头。

CVSS 5.3 · Medium

Possible ATT&CK Techniques 1 AI

T1566.003 · Spearphishing via Service

Affected Version Matrix 2

VendorProduct Version RangeStatus
KNIME KNIME Business Hub < 1.19.0 affected
1.19.0 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-115494

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user interaction. This means the state of a resource could be changed without the user noticing. As a workaround, an API gateway for firewall in front of KNIME Business Hub could remove the X-Forwaded-For header from all incoming requests.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/U:Green
Source: CVE Program / CVE List V5
Vulnerability Type
跨站请求伪造(CSRF)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
KNIME KNIME Business Hub 0 ~ 1.19.0 -

II. Public POCs for CVE-2026-115494

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-115494

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-115494 (1)

Same Patch Batch · KNIME · 2026-10-22 · 7 CVEs total

CVE-2026-115496 6.9 MEDIUM Workflow names may be leaked to unauthenticated users in KNIME Business Hub
CVE-2026-115516 6.9 MEDIUM Basic account information visible to unauthenticated user in Business Hub SaaS
CVE-2026-115517 6.4 MEDIUM Unrestricted network access between execution contexts in KNIME Business Hub
CVE-2026-115502 6.3 MEDIUM DataApp links without logging expose job information to other user in KNIME Business Hub
CVE-2026-115454 5.3 MEDIUM Large tables in data apps can bring down execution services in KNIME Hub
CVE-2026-115519 2.1 LOW Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub

IV. Related Vulnerabilities

Same product: KNIME Business Hub
Same vendor: KNIME
Same weakness: CWE-352

V. Comments for CVE-2026-115494

No comments yet

Leave a comment