ClickHouse – RCE – CVE-2026-116366
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Hrih News reports on a run of security advisories for ClickHouse, the open-source analytical database, spanning 2019 to 2026. The list covers remote code execution flaws, including CVE-2026-116366 and CVE-2025-1385, plus heap overflows, crashes, and data-exposure bugs in compression codecs and the native and HTTP interfaces.