https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 11:18:19 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52969 <p>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.</p> <p>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-52969 https://cve.radiocsirt.org/vuln/ghsa-354g-72cf-fpqr <p>ClickHouse 25.7.1.557 allows low-privileged users to execute shell commands by querying existing Executable() tables created by higher-privileged users. Although the CREATE TABLE privilege is restricted, there is no access control preventing low-privileged users from invoking Executable tables already present in the system. If an attacker can influence the contents of the script referenced by the Executable() engine through writable paths, they may execute controlled commands in the context of the ClickHouse server, leading to privilege escalation and unauthorized code execution. NOTE: the Supplier&#39;s position is that these types of executions by low-privileged users are the expected behavior.</p> <p>ClickHouse 25.7.1.557 allows low-privileged users to execute shell commands by querying existing Executable() tables created by higher-privileged users. Although the CREATE TABLE privilege is restricted, there is no access control preventing low-privileged users from invoking Executable tables already present in the system. If an attacker can influence the contents of the script referenced by the Executable() engine through writable paths, they may execute controlled commands in the context of the ClickHouse server, leading to privilege escalation and unauthorized code execution. NOTE: the Supplier&#39;s position is that these types of executions by low-privileged users are the expected behavior.</p> https://cve.radiocsirt.org/vuln/ghsa-354g-72cf-fpqr https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-52969 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: clickhouse, Ubuntu:24.04:LTS: clickhouse</p> <p>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: clickhouse, Ubuntu:24.04:LTS: clickhouse</p> <p>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-52969