Sploitus

22 exploited vulnerabilities in Clickhouse

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Clickhouse, Unknown, Linux Mint, Canonical, Vector
With known exploits
22
Affected Clickhouse versions
< 21.10.2.15, 23.3.16.7, 23.8.6.16, 23.9.4.11, 23.10.2.13, 24.3.3.102, 23.3.18.15, 23.8.8.20, 23.9.6.20, 23.10.5.20, 22.3.12.19, 22.6.6.16, 22.7.4.16, 22.8.2.11, 22.9.1.2603, 23.3.17.13, 23.8.7.24, 23.9.5.29, 23.10.4.25, 23.3.22.3, 23.8.12.13, 23.12.6.19, 24.1.1.2048
Affected Clickhouse Clickhouse Cloud versions
< 23.9.2.47475, 23.9.2.47551, 24.0.2.54535
Affected Dify versions
< 1.16.0

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2021-43305
CVSS 10.0 HIGH 2021-10-18
CVE-2021-43304
CVSS 10.0 HIGH 2021-10-18
CVE-2026-39196
CVSS 9.8 CRITICAL 2026-06-15FIX AVAILABLE
CVE-2023-47118
CVSS 9.8 CRITICAL 2023-11-26FIX AVAILABLE
CVE-2026-55879
CVSS 9.3 CRITICAL 2026-07-10FIX AVAILABLE
CVE-2026-61461
CVSS 8.8 HIGH 2026-07-10FIX AVAILABLE
CVE-2026-10105
CVSS 8.7 HIGH 2026-05-29
CVE-2026-57955
CVSS 8.5 HIGH 2026-06-29FIX AVAILABLE
CVE-2024-6873
CVSS 8.1 HIGH 2024-08-01FIX AVAILABLE
CVE-2021-42388
CVSS 8.1 HIGH 2021-10-18
CVE-2021-42387
CVSS 8.1 HIGH 2021-10-18
CVE-2024-41436
CVSS 7.5 HIGH 2024-09-03
CVE-2023-48704
CVSS 7.5 HIGH 2023-11-26FIX AVAILABLE
CVE-2022-44010
CVSS 7.5 HIGH 2022-09-22FIX AVAILABLE
CVE-2022-44011
CVSS 6.5 MEDIUM 2022-09-22FIX AVAILABLE
CVE-2021-42391
CVSS 6.5 MEDIUM 2021-10-18
CVE-2021-42390
CVSS 6.5 MEDIUM 2021-10-18
CVE-2021-42389
CVSS 6.5 MEDIUM 2021-10-18
CVE-2023-48298
CVSS 5.9 MEDIUM 2023-11-26
CVE-2026-57230
CVSS 5.4 MEDIUM 2026-07-10FIX AVAILABLE
CVE-2024-22412
CVSS 4.9 MEDIUM 2024-01-30FIX AVAILABLE
CVE-2025-52969 1 exploit
CVSS 2.8 LOW 2025-06-23FIX AVAILABLE
Exploit for CVE-2025-52969