In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file system which led to a Remote Code Execution vulnerability.Referenceshttps://clickhouse.yandex/docs/en/security_changelog/