Critical severityNVD Advisory· Published Oct 30, 2026

CVE-2026-116366

Description

An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.

Patches

Vulnerability mechanics

References

clickhouse.com/docs/resources/changelogs/security-changelognvd
github.com/ClickHouse/ClickHouse/blob/master/SECURITY.mdnvd

News mentions

No linked articles in our index yet.