CVE-2026-115502

In KNIME Business Hub versions prior to 1.19.0 , a missing authorization check allows any individual with access to a "link without login" for a DataApp to list and potentially access jobs belonging to other users created via the same link. The practical impact involves unauthorized exposure of j...