Skip to content
OpenAdvisories

Vendor

h2oai

30 known vulnerabilities.

Products

h2oai/h2o-3 23 h2o-3 6 h2ogpt 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-65700

    h2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files API

    h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API that allows unauthenticated remote attackers to read, write, and delete arbitrary files accessible to the server process by supplying traversal sequences in the be…

    h2oai h2ogpt
  • Critical 9.1
    CVE-2024-5986

    Remote Arbitrary File Write with Arbitrary Data in h2oai/h2o-3

    A vulnerability in h2oai/h2o-3 version 3.46.0.1 allows remote attackers to write arbitrary data to any file on the server. This is achieved by exploiting the `/3/Parse` endpoint to inject attacker-controlled data as the header of an empty file, which is then …

    h2oai h2oai/h2o-3 h2o ai.h2o:h2o-core Maven PyPI
  • Critical 9.8
    CVE-2025-6544

    Deserialization Vulnerability in h2oai/h2o-3

    A deserialization vulnerability exists in h2oai/h2o-3 versions <= 3.46.0.8, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by …

    h2oai h2oai/h2o-3 h2o ai.h2o:h2o-core Maven PyPI
  • Critical 9.8
    CVE-2025-5662

    Deserialization Vulnerability in h2oai/h2o-3

    A deserialization vulnerability exists in the H2O-3 REST API (POST /99/ImportSQLTable) that affects all versions up to 3.46.0.7. This vulnerability allows remote code execution (RCE) due to improper validation of JDBC connection parameters when using a Key-Va…

    h2oai h2oai/h2o-3
  • Critical 9.8
    CVE-2025-6507 EPSS 17%

    Deserialization of Untrusted Data in h2oai/h2o-3

    A vulnerability in the h2oai/h2o-3 repository allows attackers to exploit deserialization of untrusted data, potentially leading to arbitrary code execution and reading of system files. This issue affects the latest master branch version 3.47.0.99999. The vul…

    h2oai h2oai/h2o-3
  • Critical 9.8
    CVE-2024-10553

    Jdbc Deserialization in h2oai/h2o-3

    A vulnerability in the h2oai/h2o-3 REST API versions 3.46.0.4 allows unauthenticated remote attackers to execute arbitrary code via deserialization of untrusted data. The vulnerability exists in the endpoints POST /99/ImportSQLTable and POST /3/SaveToHiveTabl…

    h2oai h2oai/h2o-3 h2o ai.h2o:h2o-core Maven PyPI
  • Critical 9.3
    CVE-2023-6569

    External Control of File Name or Path in h2oai/h2o-3

    External Control of File Name or Path in h2oai/h2o-3

    h2oai h2oai/h2o-3 h2o PyPI
  • Critical 9.3
    CVE-2023-6013

    H2O Local File Include

    H2O is vulnerable to stored XSS vulnerability which can lead to a Local File Include attack.

    h2oai h2oai/h2o-3
  • Critical 9.3
    CVE-2023-6038 Scanner template

    Local File Inclusion in h2oai/h2o-3

    A Local File Inclusion (LFI) vulnerability exists in the h2o-3 REST API, allowing unauthenticated remote attackers to read arbitrary files on the server with the permissions of the user running the h2o-3 instance. This issue affects the default installation a…

    h2oai h2oai/h2o-3 ai.h2o:h2o-core Maven
  • Critical 10.0
    CVE-2023-6016 EPSS 31%

    H2O Remote Code Execution via POJO Model Import

    An attacker is able to gain remote code execution on a server hosting the H2O dashboard through it's POJO model import feature.

    h2oai h2oai/h2o-3