Clickhouse
Monthly
Unauthenticated remote code execution is possible against ClickHouse Server under certain conditions, with a CVSS 4.0 score of 9.5 reflecting full confidentiality, integrity and availability impact. The flaw is rooted in an integer overflow (CWE-190) and reachable over the network without authentication or user interaction, though a high attack complexity metric and the vendor's 'under certain conditions' qualifier indicate a situational prerequisite that the available sources do not enumerate. No public exploit code or confirmed active exploitation is referenced; the priority decision is act_now, driven by the severity and the unauthenticated network vector.
OpenPanel deployments before 3.0.0 are exposed to SQL injection through the tRPC `event.events` query, which splices an unconstrained `profile.*` filter name directly into the profiles-JOIN subquery, letting any authenticated user with read access to a single project comment out the `WHERE project_id` scoping and read events (path, country, city, profile_id, revenue) from every other tenant. The same unsanitized JOIN construction also appears in `getEventsCount` and the funnel service, so the exposure is not limited to a single endpoint. A public PoC reference with reproduction steps accompanies the GitHub advisory (GHSA-pc3q-gw7f-p2x2); it is not verified as working exploit code and there is no KEV entry. EPSS is low at 0.27% (19th percentile), and the vendor fixed the flaw with an allowlist in the 3.0.0 release.
Remote code execution is possible in Node.js releases that bundle a vulnerable Brotli decoder: a malformed brotli-compressed stream can trigger an out-of-bounds write when decompressed, corrupting memory in the process handling the data. Exposure is limited to deployments that actually pass attacker-controlled brotli data into the decoder - for example services honouring Content-Encoding: br on untrusted requests or responses, or applications calling zlib.brotliDecompress/BrotliDecompress on untrusted input - and no authentication or user interaction is required in that scenario. The flaw is rated High with a CVSS 4.0 score of 9.2 (assessed CVSS 3.1: AV:N/AC:H/PR:N/UI:N/C:H/I:H/A:H), no CISA KEV listing confirms active exploitation, and a public PoC reference exists but is not verified as working exploit code; the vendor fix is Node.js v26.12.1, released 2026-10-21.
Authentication bypass in Trigger.dev self-hosted v4 deployments (npm trigger.dev <=4.5.5) allows unauthenticated attackers to forge magic-link tokens and log in as any email address when the default MAGIC_LINK_SECRET from hosting/docker/.env.example is still in use. Publicly available exploit code exists; successful exploitation can expose or modify tenant data, and may escalate to full infrastructure compromise because default Postgres, Redis, and ClickHouse credentials are reachable from runner containers on the same Docker network. The issue is limited to Docker Compose deployments that never rotated the example secrets and left WHITELISTED_EMAILS unset; the hosted SaaS and instances with regenerated secrets or an email allowlist are not affected.
SQL injection in the SigNoz v5 query_range API (versions 0.87.0 through 0.141.x) lets authenticated users with the Viewer role or higher inject backticks and quotes into user-supplied telemetry field-key names, breaking out of ClickHouse identifier and string-literal contexts to execute arbitrary SQL. Successful exploitation allows cross-scope read access to ClickHouse system tables and exfiltration of telemetry data, with limited integrity impact; an attacker needs only valid low-privilege credentials and network access to the SigNoz API, with no user interaction or non-default configuration required. The issue is patched in SigNoz 0.142.0 per the vendor advisory (GHSA-q3h7-gpc9-2rxc), and no public exploit code was identified at time of analysis.
Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable. No vendor patch available.
ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
ClickHouse is an open-source column-oriented database management system. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.
ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
In all versions of ClickHouse before 19.14.3, an attacker having write access to ZooKeeper and who is able to run a custom server available from the network where ClickHouse runs, can create a. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Unauthenticated remote code execution is possible against ClickHouse Server under certain conditions, with a CVSS 4.0 score of 9.5 reflecting full confidentiality, integrity and availability impact. The flaw is rooted in an integer overflow (CWE-190) and reachable over the network without authentication or user interaction, though a high attack complexity metric and the vendor's 'under certain conditions' qualifier indicate a situational prerequisite that the available sources do not enumerate. No public exploit code or confirmed active exploitation is referenced; the priority decision is act_now, driven by the severity and the unauthenticated network vector.
OpenPanel deployments before 3.0.0 are exposed to SQL injection through the tRPC `event.events` query, which splices an unconstrained `profile.*` filter name directly into the profiles-JOIN subquery, letting any authenticated user with read access to a single project comment out the `WHERE project_id` scoping and read events (path, country, city, profile_id, revenue) from every other tenant. The same unsanitized JOIN construction also appears in `getEventsCount` and the funnel service, so the exposure is not limited to a single endpoint. A public PoC reference with reproduction steps accompanies the GitHub advisory (GHSA-pc3q-gw7f-p2x2); it is not verified as working exploit code and there is no KEV entry. EPSS is low at 0.27% (19th percentile), and the vendor fixed the flaw with an allowlist in the 3.0.0 release.
Remote code execution is possible in Node.js releases that bundle a vulnerable Brotli decoder: a malformed brotli-compressed stream can trigger an out-of-bounds write when decompressed, corrupting memory in the process handling the data. Exposure is limited to deployments that actually pass attacker-controlled brotli data into the decoder - for example services honouring Content-Encoding: br on untrusted requests or responses, or applications calling zlib.brotliDecompress/BrotliDecompress on untrusted input - and no authentication or user interaction is required in that scenario. The flaw is rated High with a CVSS 4.0 score of 9.2 (assessed CVSS 3.1: AV:N/AC:H/PR:N/UI:N/C:H/I:H/A:H), no CISA KEV listing confirms active exploitation, and a public PoC reference exists but is not verified as working exploit code; the vendor fix is Node.js v26.12.1, released 2026-10-21.
Authentication bypass in Trigger.dev self-hosted v4 deployments (npm trigger.dev <=4.5.5) allows unauthenticated attackers to forge magic-link tokens and log in as any email address when the default MAGIC_LINK_SECRET from hosting/docker/.env.example is still in use. Publicly available exploit code exists; successful exploitation can expose or modify tenant data, and may escalate to full infrastructure compromise because default Postgres, Redis, and ClickHouse credentials are reachable from runner containers on the same Docker network. The issue is limited to Docker Compose deployments that never rotated the example secrets and left WHITELISTED_EMAILS unset; the hosted SaaS and instances with regenerated secrets or an email allowlist are not affected.
SQL injection in the SigNoz v5 query_range API (versions 0.87.0 through 0.141.x) lets authenticated users with the Viewer role or higher inject backticks and quotes into user-supplied telemetry field-key names, breaking out of ClickHouse identifier and string-literal contexts to execute arbitrary SQL. Successful exploitation allows cross-scope read access to ClickHouse system tables and exfiltration of telemetry data, with limited integrity impact; an attacker needs only valid low-privilege credentials and network access to the SigNoz API, with no user interaction or non-default configuration required. The issue is patched in SigNoz 0.142.0 per the vendor advisory (GHSA-q3h7-gpc9-2rxc), and no public exploit code was identified at time of analysis.
Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable. No vendor patch available.
ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
ClickHouse is an open-source column-oriented database management system. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.
ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
In all versions of ClickHouse before 19.14.3, an attacker having write access to ZooKeeper and who is able to run a custom server available from the network where ClickHouse runs, can create a. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.