CVE-2025-1385
Last modified
CVE-2025-1385 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows clickhouse-server to dynamically load a library from a specified path and execute it in an isolated process. EPSS estimates a 0.43% chance of exploitation in the next 30 days.
Description
When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows clickhouse-server to dynamically load a library from a specified path and execute it in an isolated process. Combined with the ClickHouse table engine functionality that permits file uploads to specific directories, a misconfigured server can be exploited by an attacker with privilege to access to both table engines to execute arbitrary code on the ClickHouse server. You can check if your ClickHouse server is vulnerable to this vulnerability by inspecting the configuration file and confirming if the following setting is enabled: <library_bridge> <port>9019</port> </library_bridge>
Metrics
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-1385?
How severe is CVE-2025-1385?
How do I fix CVE-2025-1385?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-13844CWE-415: Double Free vulnerability exists that could cause h…5.3
- CVE-2025-13845CWE-416: Use After Free vulnerability that could cause remot…7.8
- CVE-2025-13846The Easy Map Creator plugin for WordPress is vulnerable to S…6.4
- CVE-2025-13847The PhotoFade plugin for WordPress is vulnerable to Stored C…6.4
- CVE-2025-13848The STM Gallery 1.9 plugin for WordPress is vulnerable to St…6.4
- CVE-2025-13849The Cool YT Player plugin for WordPress is vulnerable to Sto…6.4
- CVE-2025-13850The LS Google Map Router plugin for WordPress is vulnerable …6.4
- CVE-2025-13851The Buyent Classified plugin for WordPress (bundled with Buy…9.8
- CVE-2025-13852The Debt.com Business in a Box plugin for WordPress is vulne…6.4
- CVE-2025-13853The Nearby Now Reviews plugin for WordPress is vulnerable to…6.4
- CVE-2025-13854The Curved Text plugin for WordPress is vulnerable to Stored…6.4
- CVE-2025-13855IBM Storage Protect Server 8.2.0 IBM Storage Protect Plus Se…8.8
Are you affected by CVE-2025-1385?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST