CVE-2025-1385
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Fail input validation in clickhouse-library-bridge API could lead to RCE under specific configuration
When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows clickhouse-server to dynamically load a library from a specified path and execute it in an isolated process. Combined with the ClickHouse table engine functionality that permits file uploads to specific directories, a misconfigured server can be exploited by an attacker with privilege to access to both table engines to execute arbitrary code on the ClickHouse server. You can check if your ClickHouse server is vulnerable to this vulnerability by inspecting the configuration file and confirming if the following setting is enabled: <library_bridge> <port>9019</port> </library_bridge>
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ClickHouse OSS
- Vendor
- ClickHouse
- Product
- ClickHouse OSS
- Platforms
- Unknown
- Default status
unaffected- Package
- ClickHouse
- Package collection
- https://github.com/ClickHouse/clickhouse
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 24.3 | affected | custom | 24.3.18.6 | Unavailable | None listed |
| 24.8 | affected | custom | 24.8.14.27 | Unavailable | None listed |
| 24.11 | affected | custom | 24.11.5.34 | Unavailable | None listed |
| 24.12 | affected | custom | 24.12.5.65 | Unavailable | None listed |
| 25.1 | affected | custom | 25.1.5.5 | Unavailable | None listed |