An authenticated remote user can exploit an authorization flaw that allows unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0. The flaw enables the attacker to connect to open network ports on executors that belong to other contexts, potentially exfiltrating data or executing code without further authentication. This weakness is identified as CWE‑653, reflecting the failure to prevent improper input or privilege escalation through network access control.

KNIME Business Hub versions earlier than 1.19.0 are affected. The issue resides in the platform’s default configuration, where executors may expose network ports depending on the active workflows. The vulnerability does not exist in later releases that contain the fix.

The CVSS score of 6.4 indicates a medium severity. Exploitation requires an authenticated session and knowledge of the target executor’s IP address; open ports must also exist, and by default none are open, reducing the attack surface. Because no EPSS information is available and the vulnerability is not listed in CISA KEV, the current risk level can be considered moderate, yet organizations using vulnerable versions should address it promptly.