CVE-2026-115517: CWE-653 Improper isolation or compartmentalization in KNIME KNIME Business Hub

This vulnerability involves improper isolation or compartmentalization (CWE-653) in KNIME Business Hub prior to version 1.19.0. It allows an authenticated remote user to access open network ports on executors across different execution contexts due to unrestricted network access. The issue requires knowledge of the executor's IP address and the presence of open network ports that do not require additional authentication. By default, executors do not expose open ports, but certain workflows may open ports, increasing exposure. A manual workaround involves creating network policies to restrict access.

The vulnerability enables authenticated remote users to potentially access open network ports on executors in different execution contexts, which could lead to unauthorized access if those ports are open and lack further authentication. Since no ports are open by default, the impact depends on the specific workflows running and their network exposure. There are no known exploits in the wild.

No official patch or fix is indicated in the provided data. As a workaround, administrators should manually create network policies to restrict network access between execution contexts and limit exposure of open ports. Users should upgrade to version 1.19.0 or later once available, as the vulnerability affects versions before 1.19.0.