critical9.5
CVE-2026-116366
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary …
Impact
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| ClickHouse | ClickHouse | from 26.8 before 26.8.36.3-lts from 26.3 before 26.3.62.3-lts from 26.10 before 26.10.3.7-stable from 26.9 before 26.9.27.3-stable |
| ClickHouse | ClickHouse Cloud | from 26.6 before 26.6.1.2439 from 26.4 before 26.4.1.2704 from 26.10 before 26.10.2.84 from 25.12 before 25.12.1.1713 from 26.8 before 26.8.1.597 from 26.2 before 26.2.1.835 |