CVE-2026-116366 - Vulnerability Details - OpenCVE

An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.

Attack Vector Network

Attack Complexity High

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact High

Subsequent System Availability Impact High

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://clickhouse.com/docs/resources/changelogs/security-changelog
https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md

History

Fri, 30 Oct 2026 11:15:00 +0000

Type	Values Removed	Values Added
Description		An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.
Title		Unauthenticated RCE vulnerability against ClickHouse Server
Weaknesses		CWE-190
References		https://clickhouse.com/docs/resources/changelogs/security-changelog https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md
Metrics		cvssV4_0 `{'score': 9.5, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: ClickHouse

Published: 2026-10-30T11:00:11.115Z

Updated: 2026-10-30T11:00:11.115Z

Reserved: 2026-10-26T07:54:23.069Z

Link: CVE-2026-116366

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-10-30T11:17:32.540

Modified: 2026-10-30T11:17:32.540

Link: CVE-2026-116366

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-30T12:30:14Z

Weaknesses

CWE-190

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-116366", "assignerOrgId": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6", "state": "PUBLISHED", "assignerShortName": "ClickHouse", "dateReserved": "2026-10-26T07:54:23.069Z", "datePublished": "2026-10-30T11:00:11.115Z", "dateUpdated": "2026-10-30T11:00:11.115Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6", "shortName": "ClickHouse", "dateUpdated": "2026-10-30T11:00:11.115Z"}, "title": "Unauthenticated RCE vulnerability against ClickHouse Server", "datePublic": "2026-10-30T10:59:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-190", "description": "CWE-190 Integer overflow or wraparound", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-248", "descriptions": [{"lang": "en", "value": "CAPEC-248 Command Injection"}]}], "affected": [{"vendor": "ClickHouse", "product": "ClickHouse", "platforms": ["x86", "arm"], "collectionURL": "https://packages.clickhouse.com/", "packageName": "ClickHouse", "repo": "https://github.com/ClickHouse/clickhouse", "versions": [{"status": "affected", "version": "26.3", "lessThan": "26.3.62.3-lts", "versionType": "custom"}, {"status": "affected", "version": "26.8", "lessThan": "26.8.36.3-lts", "versionType": "custom"}, {"status": "affected", "version": "26.9", "lessThan": "26.9.27.3-stable", "versionType": "custom"}, {"status": "affected", "version": "26.10", "lessThan": "26.10.3.7-stable", "versionType": "custom"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<pre>An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server. </pre>"}]}], "references": [{"url": "https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md"}, {"url": "https://clickhouse.com/docs/resources/changelogs/security-changelog"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "CRITICAL", "baseScore": 9.5, "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"}}], "credits": [{"lang": "en", "value": "Elshad Toklayev", "type": "reporter"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}}}

{"affected": [{"affectedData": [{"collectionURL": "https://packages.clickhouse.com/", "defaultStatus": "affected", "packageName": "ClickHouse", "platforms": ["x86", "arm"], "product": "ClickHouse", "repo": "https://github.com/ClickHouse/clickhouse", "vendor": "ClickHouse", "versions": [{"lessThan": "26.3.62.3-lts", "status": "affected", "version": "26.3", "versionType": "custom"}, {"lessThan": "26.8.36.3-lts", "status": "affected", "version": "26.8", "versionType": "custom"}, {"lessThan": "26.9.27.3-stable", "status": "affected", "version": "26.9", "versionType": "custom"}, {"lessThan": "26.10.3.7-stable", "status": "affected", "version": "26.10", "versionType": "custom"}]}], "source": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server."}], "id": "CVE-2026-116366", "lastModified": "2026-10-30T11:17:32.540", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.5, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6", "type": "Secondary"}]}, "published": "2026-10-30T11:17:32.540", "references": [{"source": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6", "url": "https://clickhouse.com/docs/resources/changelogs/security-changelog"}, {"source": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6", "url": "https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md"}], "sourceIdentifier": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-190"}], "source": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6", "type": "Secondary"}]}