CVE-2025-52969
ClickHouse Executable Table Command Injection Vulnerability
Description
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
INFO
Published Date :
June 23, 2025, 5:15 p.m.
Last Modified :
July 3, 2025, 4:15 p.m.
Remotely Exploit :
No
Source :
cb7ba516-3b07-4c98-b0c2-715220f1a8f6
Solution
- Consult the CNA for clarification on the CVE status.
Public PoC/Exploit Available at Github
CVE-2025-52969 has a 2 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
None
None
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-52969 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2025-52969 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Rejected by cb7ba516-3b07-4c98-b0c2-715220f1a8f6
Jul. 03, 2025
Action Type Old Value New Value -
CVE Modified by cb7ba516-3b07-4c98-b0c2-715220f1a8f6
Jul. 03, 2025
Action Type Old Value New Value Removed Tag MITRE: disputed Changed Description ClickHouse 25.7.1.557 allows low-privileged users to execute shell commands by querying existing Executable() tables created by higher-privileged users. Although the CREATE TABLE privilege is restricted, there is no access control preventing low-privileged users from invoking Executable tables already present in the system. If an attacker can influence the contents of the script referenced by the Executable() engine through writable paths, they may execute controlled commands in the context of the ClickHouse server, leading to privilege escalation and unauthorized code execution. NOTE: the Supplier's position is that these types of executions by low-privileged users are the expected behavior. Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Removed CVSS V3.1 MITRE: AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N Removed CWE MITRE: CWE-420 Removed Reference CISA-ADP: https://github.com/skraft9/clickhouse-security-research Removed Reference MITRE: https://github.com/skraft9/clickhouse-security-research -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 23, 2025
Action Type Old Value New Value Added Reference https://github.com/skraft9/clickhouse-security-research -
New CVE Received by [email protected]
Jun. 23, 2025
Action Type Old Value New Value Added Tag disputed Added Description ClickHouse 25.7.1.557 allows low-privileged users to execute shell commands by querying existing Executable() tables created by higher-privileged users. Although the CREATE TABLE privilege is restricted, there is no access control preventing low-privileged users from invoking Executable tables already present in the system. If an attacker can influence the contents of the script referenced by the Executable() engine through writable paths, they may execute controlled commands in the context of the ClickHouse server, leading to privilege escalation and unauthorized code execution. NOTE: the Supplier's position is that these types of executions by low-privileged users are the expected behavior. Added CVSS V3.1 AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N Added CWE CWE-420 Added Reference https://github.com/skraft9/clickhouse-security-research