Hh2oai

Products

Exploited and recent CVEs

• CVE-2026-65700 Critical 9.8 h2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files API 1.5%
• CVE-2026-8752 Medium 5.3 h2oai h2o-3 Rapids setproperty Primitive AstSetProperty.java exec access control 0.3%
• CVE-2026-8751 High 7.3 h2oai h2o-3 JAR Model.java importBinaryModel deserialization 0.4%
• CVE-2026-8750 Medium 5.3 h2oai h2o-3 ImportFile API PersistNFS.java importFiles information disclosure 0.5%
• CVE-2026-3960 Medium 5.9 Remote Code Execution in h2oai/h2o-3 0.9%
• CVE-2024-5986 Critical 9.1 Remote Arbitrary File Write with Arbitrary Data in h2oai/h2o-3 0.7%
• CVE-2025-10769 Medium 6.3 h2oai h2o-3 H2 JDBC Driver ImportSQLTable deserialization 0.5%
• CVE-2025-10768 Medium 6.3 h2oai h2o-3 IBMDB2 JDBC Driver ImportSQLTable deserialization 0.4%
• CVE-2025-6544 Critical 9.8 Deserialization Vulnerability in h2oai/h2o-3 1.0%
• CVE-2025-5662 Critical 9.8 Deserialization Vulnerability in h2oai/h2o-3 0.7%
• CVE-2025-6507 Critical 9.8 Deserialization of Untrusted Data in h2oai/h2o-3 17.3%
• CVE-2024-10549 High 7.5 Denial of Service by ReDOS in h2oai/h2o-3 0.6%
• CVE-2024-8062 High 7.5 Denial of Service in h2oai/h2o-3 0.5%
• CVE-2024-7768 High 7.5 Denial of Service in h2oai/h2o-3 0.8%
• CVE-2024-6863 Medium 6.5 Encryption of Arbitrary Files with Attacker-Controlled Key in h2oai/h2o-3 0.4%
• CVE-2024-8616 High 8.2 Arbitrary File Overwrite in h2oai/h2o-3 0.6%
• CVE-2024-10550 High 7.5 Denial of Service by ReDOS in h2oai/h2o-3 0.6%
• CVE-2024-6854 High 7.1 Arbitrary File Overwrite in h2oai/h2o-3 0.8%
• CVE-2024-10572 High 7.5 Denial of Service and Arbitrary File Write in h2oai/h2o-3 0.7%
• CVE-2024-10553 Critical 9.8 Jdbc Deserialization in h2oai/h2o-3 1.6%
• CVE-2024-7765 High 7.5 Denial of Service in h2oai/h2o-3 0.8%
• CVE-2024-8862 High 7.3 h2oai h2o-3 JDBC Connection 1 getConnectionSafe deserialization 1.3%
• CVE-2024-5979 High 7.5 Denial of Service via Invalid Argument in h2oai/h2o-3 0.8%
• CVE-2024-5550 Medium 5.3 Exposure of Sensitive Information via Arbitrary System Path Lookup in h2oai/h2o-3 0.8%
• CVE-2024-1456 High 7.1 S3 Bucket Takeover in h2oai/h2o-3 0.2%
• CVE-2023-6569 Critical 9.3 External Control of File Name or Path in h2oai/h2o-3 0.7%
• CVE-2023-6013 Critical 9.3 H2O Local File Include 0.7%
• CVE-2023-6017 High 8.7 H2O S3 Bucket Takeover 0.9%
• CVE-2023-6038 Critical 9.3 Local File Inclusion in h2oai/h2o-3 4.3%
• CVE-2023-6016 Critical 10.0 H2O Remote Code Execution via POJO Model Import 30.6%