CVE-2026-116366
Full vulnerability record from the local CVENow database.
Description
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.
Severity
CRITICAL
CVSS score
9.5
(v4.0)
Vulnerability status
Received
Source identifier
cb7ba516-3b07-4c98-b0c2-715220f1a8f6
Published
2026-10-30 11:17:32.540000
Last modified
2026-10-30 17:17:15.220000
View original CVE JSON
{
"id": "CVE-2026-116366",
"sourceIdentifier": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6",
"published": "2026-10-30T11:17:32.540",
"lastModified": "2026-10-30T17:17:15.220",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server."
}
],
"affected": [
{
"source": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6",
"affectedData": [
{
"vendor": "ClickHouse",
"product": "ClickHouse",
"defaultStatus": "affected",
"collectionURL": "https://packages.clickhouse.com/",
"packageName": "ClickHouse",
"platforms": [
"x86",
"arm"
],
"repo": "https://github.com/ClickHouse/clickhouse",
"versions": [
{
"version": "26.3",
"lessThan": "26.3.62.3-lts",
"versionType": "custom",
"status": "affected"
},
{
"version": "26.8",
"lessThan": "26.8.36.3-lts",
"versionType": "custom",
"status": "affected"
},
{
"version": "26.9",
"lessThan": "26.9.27.3-stable",
"versionType": "custom",
"status": "affected"
},
{
"version": "26.10",
"lessThan": "26.10.3.7-stable",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ClickHouse",
"product": "ClickHouse Cloud",
"defaultStatus": "unaffected",
"collectionURL": "https://console.clickhouse.cloud/",
"packageName": "ClickHouse",
"platforms": [
"ARM",
"x86"
],
"repo": "https://github.com/ClickHouse/clickhouse",
"versions": [
{
"version": "25.12",
"lessThan": "25.12.1.1713",
"versionType": "custom",
"status": "affected"
},
{
"version": "26.2",
"lessThan": "26.2.1.835",
"versionType": "custom",
"status": "affected"
},
{
"version": "26.4",
"lessThan": "26.4.1.2704",
"versionType": "custom",
"status": "affected"
},
{
"version": "26.6",
"lessThan": "26.6.1.2439",
"versionType": "custom",
"status": "affected"
},
{
"version": "26.8",
"lessThan": "26.8.1.597",
"versionType": "custom",
"status": "affected"
},
{
"version": "26.10",
"lessThan": "26.10.2.84",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.5,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-30T16:36:22.337339Z",
"id": "CVE-2026-116366",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-190"
}
]
}
],
"references": [
{
"url": "https://clickhouse.com/docs/resources/changelogs/security-changelog",
"source": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6"
},
{
"url": "https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md",
"source": "cb7ba516-3b07-4c98-b0c2-715220f1a8f6"
}
]
}