What’s Vulnerable › Products

Clickhouse Cloud vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Clickhouse Cloud version is affected

Latest Clickhouse Cloud vulnerabilities

• CVE-2026-116366 — Unauthenticated RCE vulnerability against ClickHouse Server (CVSS 9.5)
• CVE-2024-22412 — ClickHouse's Role-based Access Control is bypassed when query caching is enabled. (CVSS 4.9)
• CVE-2023-48704 — Unauthenticated heap buffer overflow in Gorrila codec decompression (CVSS 7.5)
• CVE-2023-48298 — Integer underflow leading to stack overflow in FPC codec decompression (CVSS 7.5)
• CVE-2023-47118 — Heap buffer overflow in T64 codec decompression (CVSS 9.8)