ClickHouse patches a critical flaw that could let unauthenticated users run code on the server
CVE-2026-116366 is rated 9.5 under CVSS 4.0. Fixed in four ClickHouse lines; Cloud is patched. Langfuse pinned its compose file. What to upgrade.
Topic · 6 stories
6 stories tagged clickhouse on AI Tamer, newest first.
CVE-2026-116366 is rated 9.5 under CVSS 4.0. Fixed in four ClickHouse lines; Cloud is patched. Langfuse pinned its compose file. What to upgrade.
ClickHouse's 5 October post calls executable UDFs generally available on AWS, GCP, and Azure, with a Native runtime beside Python 3.11. Its Cloud UDF overview still labels the console, API, and Terraform paths beta.
ClickHouse (Oct 2, 2026): Managed Postgres live wal-g backups use WALG_DIRECT_IO plus stripe-sized RAID0 NVMe reads to skip page-cache eviction. Vendor benches only; incremental still prototyping.
LiteLLM (Oct 1, 2026) launches Lens: AI agents investigate production agent traces at the gateway. Traces land in customer-run ClickHouse; self-host via Docker Compose with OTLP /v1/traces and /lens APIs.
ClickHouse (Sep 29, 2026): Fabric workload in public preview; OneLake Iceberg read GA via Table APIs; Iceberg write in public preview with credential vending; Azure BYOC on the Microsoft Marketplace.
ClickHouse’s chDB Durable Layer (Sep 28, 2026): local MergeTree plus object storage via flush()/checkpoint(). chDB 4.4+ with chdb[durable]; chdb-core 26.7.3; single-writer. npm [email protected] differs from the Python package.