CRITICAL 9.5 NVD

CVE-2026-116366

An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary c

An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.

References

https://clickhouse.com/docs/resources/changelogs/security-changelog
https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md

Published: 2026-10-30 · Source: NVD · Feed updated: 2026-10-30

This critical severity vulnerability with a CVSS score of 9.5 was published on 2026-10-30 via NVD.

Risk Timeline

CVE Disclosed2026-10-30 · -1 days ago

Remediation Resources

Official Advisory

clickhouse.com/docs/resources/changelogs/security-changelog

GitHub

github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md

vulnfeed aggregates 17475 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.