Synced 02 Nov 2026 13:39 UTC Account

Is ClickHouse 26.3.60.2 patched?

ClickHouse · cycle 26.3 · Official site ↗
26.3.60.220/100Critical · exploited

Current stable (26.10.2.103): 20/100

Health score20/100
Open issues1
Exploited now1
Cycle 26.3 EOL2027-03-26
Latest release26.10.2.103

Summary iPlain-English security status for ClickHouse 26.3.60.2, built from its CVEs, active-exploitation data, end-of-life date and latest release.

ClickHouse 26.3.60.2 is part of the 26.3 release line. 1 actively-exploited vulnerability affects it (CISA KEV). The 26.3 line is supported until 2027-03-26. The latest supported ClickHouse release is 26.10.2.103.

Known issues affecting 26.3.60.2

Exploited first, then by exploitation probability.

CVE-2026-111497 CRITICAL exploited EPSS 83% → see advisory

Other ClickHouse versions

Check another release line of ClickHouse.

ClickHouse 26.10.2.103ClickHouse 26.9.25.15ClickHouse 26.8.34.13ClickHouse 26.7.37.6ClickHouse 26.6.8.7ClickHouse 26.5.7.64ClickHouse 26.4.5.143ClickHouse 26.2.19.43ClickHouse 26.1.12.23ClickHouse 25.12.12.1ClickHouse 25.11.9.34ClickHouse 25.10.7.6ClickHouse 25.9.7.56ClickHouse 25.8.33.6ClickHouse 25.7.8.71ClickHouse 25.6.13.41ClickHouse 25.5.11.15ClickHouse 25.4.13.22ClickHouse 25.3.14.14ClickHouse 25.2.2.39ClickHouse 25.1.8.25

Frequently asked

Is ClickHouse 26.3.60.2 patched?

No — 1 actively-exploited vulnerability affects ClickHouse 26.3.60.2. Upgrade now.

When does ClickHouse 26.3 reach end-of-life?

ClickHouse 26.3 is supported until 2027-03-26.

What is the latest version of ClickHouse?

The latest supported ClickHouse release is 26.10.2.103.

Is ClickHouse 26.3.60.2 still receiving security updates?

Yes — the 26.3 line is still supported until 2027-03-26 and receiving security updates. The latest release is 26.10.2.103.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against ClickHouse's official advisory before you patch or upgrade — ClickHouse official site ↗