Log in Start free

ClickHouse

Products

ProductCVEsExploitedLatest
ClickHouse6–Oct 30, 2026
ClickHouse Cloud1–Oct 30, 2026
ClickHouse OSS1–Mar 20, 2025

Exploited and recent CVEs

  • CVE-2026-116366 Critical 9.5 Unauthenticated RCE vulnerability against ClickHouse Server 1.0%
  • CVE-2026-116366 Critical 9.5 Unauthenticated RCE vulnerability against ClickHouse Server 1.0%
  • CVE-2025-1385 High 7.5 Fail input validation in clickhouse-library-bridge API could lead to RCE under specific configuration 0.5%
  • CVE-2024-6873 High 8.1 Specially crafted request could caused undefined behaviour which may lead to Remote Code Execution. 0.7%
  • CVE-2024-22412 Low 2.4 ClickHouse's Role-based Access Control is bypassed when query caching is enabled. 0.6%
  • CVE-2023-48704 High 7.0 Unauthenticated heap buffer overflow in Gorrila codec decompression 0.5%
  • CVE-2023-48298 Medium 5.9 Integer underflow leading to stack overflow in FPC codec decompression 0.6%
  • CVE-2023-47118 High 7.0 Heap buffer overflow in T64 codec decompression 0.5%