12/18/2025
•
EN
Inside PostHog: How SSRF, a ClickHouse SQL Escaping 0day, and Default PostgreSQL Credentials Formed an RCE Chain
Analysis of a complex RCE attack chain in PostHog exploiting SSRF, a ClickHouse SQL 0day, and default PostgreSQL credentials.