https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:23:46 +0000 https://cve.radiocsirt.org/vuln/cve-2025-1385 <p><strong>Affected:</strong> ClickHouse OSS</p> <p>When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows clickhouse-server to dynamically load a library from a specified path and execute it in an isolated process. Combined with the ClickHouse table engine functionality that permits file uploads to specific directories, a misconfigured server can be exploited by an attacker with privilege to access to both table engines to execute arbitrary code on the ClickHouse server.</p> <p>You can check if your ClickHouse server is vulnerable to this vulnerability by inspecting the configuration file and confirming if the following setting is enabled:</p> <p>&lt;library_bridge&gt; &lt;port&gt;9019&lt;/port&gt; &lt;/library_bridge&gt;</p> <p><strong>Affected:</strong> ClickHouse OSS</p> <p>When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows clickhouse-server to dynamically load a library from a specified path and execute it in an isolated process. Combined with the ClickHouse table engine functionality that permits file uploads to specific directories, a misconfigured server can be exploited by an attacker with privilege to access to both table engines to execute arbitrary code on the ClickHouse server.</p> <p>You can check if your ClickHouse server is vulnerable to this vulnerability by inspecting the configuration file and confirming if the following setting is enabled:</p> <p>&lt;library_bridge&gt; &lt;port&gt;9019&lt;/port&gt; &lt;/library_bridge&gt;</p> https://cve.radiocsirt.org/vuln/cve-2025-1385