Vulnerability · Published May 17, 2026 · Assigned by VulDB

CVE-2026-8751h2oai h2o-3 JAR Model.java importBinaryModel deserialization

High 7.3

In plain English

A high-severity unsafe deserialization in h2o-3 from h2oai. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.4%top 64.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in h2oai h2o-3 up to 7402. This affects the function importBinaryModel of the file h2o-core/src/main/java/hex/Model.java of the component JAR Handler. Performing a manipulation results in deserialization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
h2oai	h2o-3	7402

Weakness: CWE-502, CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-364378 | h2oai h2o-3 JAR Model.java importBinaryModel deserialization vdb-entry, technical-description
VDB-364378 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #810107 | H2O-3 latest Pre-Auth Insecure Deserialization third-party-advisory
https://vulnplus-note.wetolink.com/share/b5nsQg6EcsBS exploit