CVE-2026-116366

UNKNOWN 0.0

Unauthenticated RCE vulnerability against ClickHouse Server

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.

CWE	CWE-190
Vendor	clickhouse
Product	clickhouse
Published	Oct 30, 2026

Stay Ahead of the Next One

Get instant alerts for clickhouse clickhouse

Be the first to know when new unknown vulnerabilities affecting clickhouse clickhouse are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

ClickHouse / ClickHouse

26.3 < 26.3.62.3-lts 26.8 < 26.8.36.3-lts 26.9 < 26.9.27.3-stable 26.10 < 26.10.3.7-stable

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md clickhouse.com: https://clickhouse.com/docs/resources/changelogs/security-changelog

Credits

🔍 Elshad Toklayev