ClickHouse Server: Unauthenticated remote code execution
ClickHouse Server contains a vulnerability that, under certain conditions, allows an unauthenticated attacker with network access to execute arbitrary code on the server. The CVE record rates it as critical (CVSS 4.0 base score 9.5) and classifies it as CWE-190 (integer overflow or wraparound). The vendor has not disclosed the exact trigger conditions, and no confirmed exploitation or public proof of concept is known at the time of writing.
ClickHouse · ClickHouse Server
