The flaw is an authentication bypass in Apache Artemis that permits unauthorized users within KNIME Business Hub to read all broker messages and inject new messages. This gives attackers confidentiality exposure of internal communications and the ability to alter or skew system behavior by sending crafted messages. The vulnerability stems from a missing authentication check during federation registration, which is a form of inadequate authorization (CWE-306).

All current releases of KNIME Business Hub rely on Apache Artemis versions prior to 2.52.0, making them vulnerable. A patched Artemis is bundled with KNIME Business Hub 1.18.0, 1.17.4, and 1.16.3, which resolve the authentication bypass.

The CVSS score of 5.3 indicates moderate severity. While no EPSS score is provided and the vulnerability is not listed in the KEV catalog, the issue can be exploited by any user who has normal access to execute workflows in KNIME. The attack requires no external network access because Artemis is not exposed externally; therefore, exploitation is confined to the local system or the KNIME environment.