What is GHSA-xwcw-wjgv-8cxr?

GHSA-xwcw-wjgv-8cxr is a security advisory published by GitHub Security Advisories with Medium severity. A missing authorization check allows anyone having access to a "link without login" for a DataApp...

Which CVE IDs does GHSA-xwcw-wjgv-8cxr cover?

GHSA-xwcw-wjgv-8cxr covers the following CVE IDs: CVE-2026-115502. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-xwcw-wjgv-8cxrMedium

A missing authorization check allows anyone having access to a "link without login" for a DataApp...

Vendor

GitHub Security Advisories

Published

October 22, 2026

Last Modified

October 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-115502 →

📋 Description

A missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially access jobs of other users created by the same link in KNIME Business Hub prior to 1.19.0. As workaround remove all "links without login" to DataApps.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-115502
https://www.knime.com/security/advisories
https://github.com/advisories/GHSA-xwcw-wjgv-8cxr