GitHub Advisoryadvisory · Maven, PyPI

GHSA-5w3j-gwgh-4rfv H2O affected by a deserialization vulnerability

CRITICAL Published 2025-09-22 Modified 2026-10-27 Official page ↗
Aliases
CVE-2025-6544
Ecosystem
Maven, PyPI
Packages
ai.h2o:h2o-core, h2o
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502
Reviewed
2025-09-22

Affected packages

• Maven ai.h2o:h2o-core: <= 3.46.0.7 (no fix yet) • PyPI h2o: <= 3.46.0.7 (no fix yet)

Description

A deserialization vulnerability exists in h2oai/h2o-3 versions <= 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and using double URL encoding. This issue impacts all users of the affected versions.

Related

Alias · CVE (1)

  • CVE-2025-6544 A deserialization vulnerability exists in h2oai/h2o-3 versions <= 3.46.0.8, allowing attackers to read arbitrary system files and execute… vulnerability

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References