ClickHouse discloses unauthenticated RCE vulnerability CVE-2026-116366, patches available
Hacubu · x · 2026-10-31
A remote code execution vulnerability (CVE-2026-116366) has been disclosed in the ClickHouse database server: under certain conditions, an unauthenticated network attacker could run arbitrary code on the server. Fixed in 26.3.62.3-lts, 26.8.36.3-lts and later — teams running ClickHouse should patch promptly.
More from Infra
- Clover-35B-A3B Quantized to 29.4 GB Runs at ~42 tok/s on a 64 GB Mac — viveky259 · 2026-10-31
- Liquid Agent brings fully local LFM3 agent to Linux with one-command install — JosephJacks_ · 2026-10-31
- A fully local office AI stack: MiniCPM, Qwen3, LFM2.5 and Whisper — HowDevelop · 2026-10-31
- a16z: GPU rental prices up 106% in 3 months while token prices fall 58% — a16z · 2026-10-31
- vLLM nightly adds PLE disk offload, with a telling [Qwen4Exp] tag on the PR — rmhubbert · 2026-10-31
- Solo AI studio: per-minute GPU rentals rendered a 328-frame Blender shot for ~$1 — r0ck3t23 · 2026-10-31