Search
Find a vulnerability
Search criteria
2 vulnerabilities found for ClickHouse Cloud by ClickHouse
CVE-2026-116366 (GCVE-0-2026-116366)
Vulnerability from nvd – Published: 2026-10-30 11:00 – Updated: 2026-10-30 16:36
VLAI
EPSS
VEX
Title
Unauthenticated RCE vulnerability against ClickHouse Server
Summary
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-30 16:36 UTC
CWE
- CWE-190 - Integer overflow or wraparound
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| ClickHouse | ClickHouse |
Affected:
26.3 , < 26.3.62.3-lts
(custom)
Affected: 26.8 , < 26.8.36.3-lts (custom) Affected: 26.9 , < 26.9.27.3-stable (custom) Affected: 26.10 , < 26.10.3.7-stable (custom) |
|
| ClickHouse | ClickHouse Cloud |
Affected:
25.12 , < 25.12.1.1713
(custom)
Affected: 26.2 , < 26.2.1.835 (custom) Affected: 26.4 , < 26.4.1.2704 (custom) Affected: 26.6 , < 26.6.1.2439 (custom) Affected: 26.8 , < 26.8.1.597 (custom) Affected: 26.10 , < 26.10.2.84 (custom) |
Date Public
2026-10-30 10:59
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-116366",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-30T16:36:22.337339Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T16:36:32.335Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://packages.clickhouse.com/",
"defaultStatus": "affected",
"packageName": "ClickHouse",
"platforms": [
"x86",
"arm"
],
"product": "ClickHouse",
"repo": "https://github.com/ClickHouse/clickhouse",
"vendor": "ClickHouse",
"versions": [
{
"lessThan": "26.3.62.3-lts",
"status": "affected",
"version": "26.3",
"versionType": "custom"
},
{
"lessThan": "26.8.36.3-lts",
"status": "affected",
"version": "26.8",
"versionType": "custom"
},
{
"lessThan": "26.9.27.3-stable",
"status": "affected",
"version": "26.9",
"versionType": "custom"
},
{
"lessThan": "26.10.3.7-stable",
"status": "affected",
"version": "26.10",
"versionType": "custom"
}
]
},
{
"collectionURL": "https://console.clickhouse.cloud/",
"defaultStatus": "unaffected",
"packageName": "ClickHouse",
"platforms": [
"ARM",
"x86"
],
"product": "ClickHouse Cloud",
"repo": "https://github.com/ClickHouse/clickhouse",
"vendor": "ClickHouse",
"versions": [
{
"lessThan": "25.12.1.1713",
"status": "affected",
"version": "25.12",
"versionType": "custom"
},
{
"lessThan": "26.2.1.835",
"status": "affected",
"version": "26.2",
"versionType": "custom"
},
{
"lessThan": "26.4.1.2704",
"status": "affected",
"version": "26.4",
"versionType": "custom"
},
{
"lessThan": "26.6.1.2439",
"status": "affected",
"version": "26.6",
"versionType": "custom"
},
{
"lessThan": "26.8.1.597",
"status": "affected",
"version": "26.8",
"versionType": "custom"
},
{
"lessThan": "26.10.2.84",
"status": "affected",
"version": "26.10",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Elshad Toklayev"
}
],
"datePublic": "2026-10-30T10:59:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cpre\u003eAn issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server. \u003c/pre\u003e"
}
],
"value": "An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server."
}
],
"impacts": [
{
"capecId": "CAPEC-248",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-248 Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.5,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190 Integer overflow or wraparound",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T14:57:49.817Z",
"orgId": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6",
"shortName": "ClickHouse"
},
"references": [
{
"url": "https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md"
},
{
"url": "https://clickhouse.com/docs/resources/changelogs/security-changelog"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Unauthenticated RCE vulnerability against ClickHouse Server",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6",
"assignerShortName": "ClickHouse",
"cveId": "CVE-2026-116366",
"datePublished": "2026-10-30T11:00:11.115Z",
"dateReserved": "2026-10-26T07:54:23.069Z",
"dateUpdated": "2026-10-30T16:36:32.335Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116366 (GCVE-0-2026-116366)
Vulnerability from cvelistv5 – Published: 2026-10-30 11:00 – Updated: 2026-10-30 16:36
VLAI
EPSS
VEX
Title
Unauthenticated RCE vulnerability against ClickHouse Server
Summary
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-30 16:36 UTC
CWE
- CWE-190 - Integer overflow or wraparound
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| ClickHouse | ClickHouse |
Affected:
26.3 , < 26.3.62.3-lts
(custom)
Affected: 26.8 , < 26.8.36.3-lts (custom) Affected: 26.9 , < 26.9.27.3-stable (custom) Affected: 26.10 , < 26.10.3.7-stable (custom) |
|
| ClickHouse | ClickHouse Cloud |
Affected:
25.12 , < 25.12.1.1713
(custom)
Affected: 26.2 , < 26.2.1.835 (custom) Affected: 26.4 , < 26.4.1.2704 (custom) Affected: 26.6 , < 26.6.1.2439 (custom) Affected: 26.8 , < 26.8.1.597 (custom) Affected: 26.10 , < 26.10.2.84 (custom) |
Date Public
2026-10-30 10:59
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-116366",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-30T16:36:22.337339Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T16:36:32.335Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://packages.clickhouse.com/",
"defaultStatus": "affected",
"packageName": "ClickHouse",
"platforms": [
"x86",
"arm"
],
"product": "ClickHouse",
"repo": "https://github.com/ClickHouse/clickhouse",
"vendor": "ClickHouse",
"versions": [
{
"lessThan": "26.3.62.3-lts",
"status": "affected",
"version": "26.3",
"versionType": "custom"
},
{
"lessThan": "26.8.36.3-lts",
"status": "affected",
"version": "26.8",
"versionType": "custom"
},
{
"lessThan": "26.9.27.3-stable",
"status": "affected",
"version": "26.9",
"versionType": "custom"
},
{
"lessThan": "26.10.3.7-stable",
"status": "affected",
"version": "26.10",
"versionType": "custom"
}
]
},
{
"collectionURL": "https://console.clickhouse.cloud/",
"defaultStatus": "unaffected",
"packageName": "ClickHouse",
"platforms": [
"ARM",
"x86"
],
"product": "ClickHouse Cloud",
"repo": "https://github.com/ClickHouse/clickhouse",
"vendor": "ClickHouse",
"versions": [
{
"lessThan": "25.12.1.1713",
"status": "affected",
"version": "25.12",
"versionType": "custom"
},
{
"lessThan": "26.2.1.835",
"status": "affected",
"version": "26.2",
"versionType": "custom"
},
{
"lessThan": "26.4.1.2704",
"status": "affected",
"version": "26.4",
"versionType": "custom"
},
{
"lessThan": "26.6.1.2439",
"status": "affected",
"version": "26.6",
"versionType": "custom"
},
{
"lessThan": "26.8.1.597",
"status": "affected",
"version": "26.8",
"versionType": "custom"
},
{
"lessThan": "26.10.2.84",
"status": "affected",
"version": "26.10",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Elshad Toklayev"
}
],
"datePublic": "2026-10-30T10:59:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cpre\u003eAn issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server. \u003c/pre\u003e"
}
],
"value": "An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server."
}
],
"impacts": [
{
"capecId": "CAPEC-248",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-248 Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.5,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190 Integer overflow or wraparound",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T14:57:49.817Z",
"orgId": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6",
"shortName": "ClickHouse"
},
"references": [
{
"url": "https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md"
},
{
"url": "https://clickhouse.com/docs/resources/changelogs/security-changelog"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Unauthenticated RCE vulnerability against ClickHouse Server",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6",
"assignerShortName": "ClickHouse",
"cveId": "CVE-2026-116366",
"datePublished": "2026-10-30T11:00:11.115Z",
"dateReserved": "2026-10-26T07:54:23.069Z",
"dateUpdated": "2026-10-30T16:36:32.335Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}