CVE-2020-26759: Clickhouse-Driver Project Clickhouse-Driver

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, due to a buffer overflow.

Affected products

• Clickhouse-Driver Project Clickhouse-Driver: before 0.1.5 (fixed in 0.1.5)

Published 2021-01-06. Last modified 2026-06-17.