# cve.now: H2oai

The newest entries naming H2oai as an affected vendor (up to 200), of 30 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-65700](https://cve.now/CVE-2026-65700.md): h2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files API (CVSS 9.3)
- [CVE-2026-8752](https://cve.now/CVE-2026-8752.md): h2oai h2o-3 Rapids setproperty Primitive AstSetProperty.java exec access control (CVSS 6.9)
- [CVE-2026-8751](https://cve.now/CVE-2026-8751.md): h2oai h2o-3 JAR Model.java importBinaryModel deserialization (CVSS 6.9)
- [CVE-2026-8750](https://cve.now/CVE-2026-8750.md): h2oai h2o-3 ImportFile API PersistNFS.java importFiles information disclosure (CVSS 6.9)
- [CVE-2026-3960](https://cve.now/CVE-2026-3960.md): Remote Code Execution in h2oai/h2o-3 (CVSS 5.9)
- [CVE-2024-5986](https://cve.now/CVE-2024-5986.md): Remote Arbitrary File Write with Arbitrary Data in h2oai/h2o-3 (CVSS 9.1)
- [CVE-2025-10769](https://cve.now/CVE-2025-10769.md): h2oai h2o-3 H2 JDBC Driver ImportSQLTable deserialization (CVSS 5.3)
- [CVE-2025-10768](https://cve.now/CVE-2025-10768.md): h2oai h2o-3 IBMDB2 JDBC Driver ImportSQLTable deserialization (CVSS 5.3)
- [CVE-2025-6544](https://cve.now/CVE-2025-6544.md): Deserialization Vulnerability in h2oai/h2o-3 (CVSS 9.8)
- [CVE-2025-5662](https://cve.now/CVE-2025-5662.md): Deserialization Vulnerability in h2oai/h2o-3 (CVSS 9.8)
- [CVE-2025-6507](https://cve.now/CVE-2025-6507.md): Deserialization of Untrusted Data in h2oai/h2o-3 (CVSS 9.8)
- [CVE-2024-10549](https://cve.now/CVE-2024-10549.md): Denial of Service by ReDOS in h2oai/h2o-3 (CVSS 7.5)
- [CVE-2024-8062](https://cve.now/CVE-2024-8062.md): Denial of Service in h2oai/h2o-3 (CVSS 7.5)
- [CVE-2024-7768](https://cve.now/CVE-2024-7768.md): Denial of Service in h2oai/h2o-3 (CVSS 7.5)
- [CVE-2024-6863](https://cve.now/CVE-2024-6863.md): Encryption of Arbitrary Files with Attacker-Controlled Key in h2oai/h2o-3 (CVSS 6.5)
- [CVE-2024-8616](https://cve.now/CVE-2024-8616.md): Arbitrary File Overwrite in h2oai/h2o-3 (CVSS 8.2)
- [CVE-2024-10550](https://cve.now/CVE-2024-10550.md): Denial of Service by ReDOS in h2oai/h2o-3 (CVSS 7.5)
- [CVE-2024-6854](https://cve.now/CVE-2024-6854.md): Arbitrary File Overwrite in h2oai/h2o-3 (CVSS 7.1)
- [CVE-2024-10572](https://cve.now/CVE-2024-10572.md): Denial of Service and Arbitrary File Write in h2oai/h2o-3 (CVSS 7.5)
- [CVE-2024-10553](https://cve.now/CVE-2024-10553.md): Jdbc Deserialization in h2oai/h2o-3 (CVSS 9.8)
- [CVE-2024-7765](https://cve.now/CVE-2024-7765.md): Denial of Service in h2oai/h2o-3 (CVSS 7.5)
- [CVE-2024-8862](https://cve.now/CVE-2024-8862.md): h2oai h2o-3 JDBC Connection 1 getConnectionSafe deserialization (CVSS 6.9)
- [CVE-2024-5979](https://cve.now/CVE-2024-5979.md): Denial of Service via Invalid Argument in h2oai/h2o-3 (CVSS 7.5)
- [CVE-2024-5550](https://cve.now/CVE-2024-5550.md): Exposure of Sensitive Information via Arbitrary System Path Lookup in h2oai/h2o-3 (CVSS 5.3)
- [CVE-2024-1456](https://cve.now/CVE-2024-1456.md): S3 Bucket Takeover in h2oai/h2o-3 (CVSS 7.1)
- [CVE-2023-6569](https://cve.now/CVE-2023-6569.md): External Control of File Name or Path in h2oai/h2o-3 (CVSS 9.3)
- [CVE-2023-6013](https://cve.now/CVE-2023-6013.md): H2O Local File Include (CVSS 9.3)
- [CVE-2023-6017](https://cve.now/CVE-2023-6017.md): H2O S3 Bucket Takeover (CVSS 8.7)
- [CVE-2023-6038](https://cve.now/CVE-2023-6038.md): Local File Inclusion in h2oai/h2o-3 (CVSS 9.3)
- [CVE-2023-6016](https://cve.now/CVE-2023-6016.md): H2O Remote Code Execution via POJO Model Import (CVSS 10.0)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/h2oai
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.