CVE-2026-4649

{"id": "CVE-2026-4649", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-4649", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-24T14:08:57.157462Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security@knime.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 5.3, "Automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "CONCENTRATED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Amber", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "MODERATE", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security@knime.com", "affectedData": [{"vendor": "KNIME", "product": "KNIME Business Hub", "versions": [{"status": "affected", "version": "1.17.0", "lessThan": "1.17.4", "versionType": "semver"}, {"status": "affected", "version": "1.16.0", "lessThan": "1.16.3", "versionType": "semver"}, {"status": "affected", "version": "0.0.0", "lessThan": "1.15.2", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-03-24T09:16:39.763", "references": [{"url": "https://www.knime.com/security/advisories#CVE-2026-4649", "source": "security@knime.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security@knime.com", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "Apache Artemis before version 2.52.0 is affected by an authentication bypass flaw which allows reading all messages exchanged via the broker and injection of new message ( CVE-2026-27446 https://www.cve.org/CVERecord ). Since KNIME Business Hub uses Apache Artemis it is also affected by the issue. However, since Apache Artemis is not exposed to the outside it requires at least normal user privileges and the ability to execute workflows in an executor. Such a user can install and register a federated mirror without authentication to the original Apache Artemis instance and thereby read all internal messages and inject new messages.\n\nThe issue affects all versions of KNIME Business Hub. A fixed version of Apache Artemis is shipped with versions 1.18.0, 1.17.4, and 1.16.3.\n\nWe recommend updating to a fixed version as soon as possible since no workaround is known."}, {"lang": "es", "value": "Apache Artemis anterior a la versi\u00f3n 2.52.0 est\u00e1 afectado por una falla de omisi\u00f3n de autenticaci\u00f3n que permite leer todos los mensajes intercambiados a trav\u00e9s del br\u00f3ker e inyecci\u00f3n de nuevos mensajes ( CVE-2026-27446 https://www.cve.org/CVERecord ). Dado que KNIME Business Hub utiliza Apache Artemis, tambi\u00e9n est\u00e1 afectado por el problema. Sin embargo, dado que Apache Artemis no est\u00e1 expuesto al exterior, requiere al menos privilegios de usuario normal y la capacidad de ejecutar flujos de trabajo en un ejecutor. Dicho usuario puede instalar y registrar un espejo federado sin autenticaci\u00f3n a la instancia original de Apache Artemis y as\u00ed leer todos los mensajes internos e inyectar nuevos mensajes.\n\nEl problema afecta a todas las versiones de KNIME Business Hub. Una versi\u00f3n corregida de Apache Artemis se env\u00eda con las versiones 1.18.0, 1.17.4 y 1.16.3.\n\nRecomendamos actualizar a una versi\u00f3n corregida lo antes posible, ya que no se conoce ninguna soluci\u00f3n alternativa."}], "lastModified": "2026-06-17T10:56:58.580", "sourceIdentifier": "security@knime.com"}