{"id":"CVE-2026-116366","aliases":[],"cve":{"records":[{"id":"CVE-2026-116366","source":"ClickHouse","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-26T07:54:23.069Z","published":"2026-10-30T11:00:11.115Z","modified":"2026-10-30T16:36:32.335Z"}],"publishers":[{"name":"ClickHouse","role":"CNA","organizationId":"cb7ba516-3b07-4c98-b0c2-715220f1a8f6","modified":"2026-10-30T14:57:49.817Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-30T16:36:32.335Z"}],"references":[{"url":"https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md","tags":[],"source":"ClickHouse"},{"url":"https://clickhouse.com/docs/resources/changelogs/security-changelog","tags":[],"source":"ClickHouse"}],"weaknesses":[{"id":"CWE-190","description":"CWE-190 Integer overflow or wraparound","source":"ClickHouse"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-30T16:36:22.337339Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Unauthenticated RCE vulnerability against ClickHouse Server","titleSource":"ClickHouse","descriptionSource":"ClickHouse","description":"An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.","score":9.5,"severity":"critical","published":"2026-10-30T11:00:11.115Z","modified":"2026-10-30T16:36:32.335Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"ClickHouse","name":"ClickHouse","platforms":["x86","arm"],"versions":[{"version":"26.3","status":"affected","lessThan":"26.3.62.3-lts","versionType":"custom"},{"version":"26.8","status":"affected","lessThan":"26.8.36.3-lts","versionType":"custom"},{"version":"26.9","status":"affected","lessThan":"26.9.27.3-stable","versionType":"custom"},{"version":"26.10","status":"affected","lessThan":"26.10.3.7-stable","versionType":"custom"}],"defaultStatus":"affected","cpes":[],"source":"ClickHouse","url":"https://www.cve.org/CVERecord?id=CVE-2026-116366"},{"vendor":"ClickHouse","name":"ClickHouse Cloud","platforms":["ARM","x86"],"versions":[{"version":"25.12","status":"affected","lessThan":"25.12.1.1713","versionType":"custom"},{"version":"26.2","status":"affected","lessThan":"26.2.1.835","versionType":"custom"},{"version":"26.4","status":"affected","lessThan":"26.4.1.2704","versionType":"custom"},{"version":"26.6","status":"affected","lessThan":"26.6.1.2439","versionType":"custom"},{"version":"26.8","status":"affected","lessThan":"26.8.1.597","versionType":"custom"},{"version":"26.10","status":"affected","lessThan":"26.10.2.84","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"ClickHouse","url":"https://www.cve.org/CVERecord?id=CVE-2026-116366"}],"remediation":[],"references":["https://github.com/ClickHouse/ClickHouse/blob/master/SECURITY.md","https://clickhouse.com/docs/resources/changelogs/security-changelog"],"sources":[{"name":"CVE","id":"CVE-2026-116366","modified":"2026-10-30T16:36:32.335Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-116366"}],"assessments":[{"source":"ClickHouse","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","score":9.5}],"sourceAffected":[],"observedAt":"2026-10-30T16:50:14.650Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T08:10:34.534Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-10-30T11:10:32.257Z","attemptedAt":"2026-10-30T11:10:32.257Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-30T11:10:32.532Z","attemptedAt":"2026-10-30T11:10:32.532Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-10-30T11:10:32.195Z","attemptedAt":"2026-10-30T11:10:32.195Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T11:10:32.065Z","attemptedAt":"2026-10-30T11:10:32.065Z"}],"evidence":[],"aiSummary":null}