CVE-2026-116366

9.5 critical

An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.

Severity

CVSS 4.0

9.5 critical

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CWE: CWE-190
Published: 2026-10-30
Modified: 2026-10-30
Record from: the NVD, synced 2026-10-30

References

https://clickhouse.com/docs/resources/changelogs/security-changelog
https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md

Check your stack JSON