PT-2026-145987

Name of the Vulnerable Software and Affected Versions rsyslog affected versions not specified Description An issue exists in the omclickhouse action where output templates fail to escape backslash characters during the construction of SQL queries. This allows a remote attacker, without...

Important: rsyslog

Issue Overview: An SQL injection issue affects rsyslog deployments using the optional omclickhouse output module. Its built-in INSERT template used escaping that did not account for ClickHouse backslash escapes. A sender able to submit a log message routed to this action could alter the SQL sent ...