EUVD-2026-25205
GHSA-qmcv-hh7c-3m56
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
11Blast Radius
ecosystem impact- 20 maven packages depend on ai.h2o:h2o-core (20 direct, 0 indirect)
Ecosystem-wide dependent count for version 3.46.0.10.
DescriptionNVD
A critical remote code execution vulnerability exists in the unauthenticated REST API endpoint /99/ImportSQLTable in H2O-3 version 3.46.0.9 and prior. The vulnerability arises due to insufficient security controls in the parameter blacklist mechanism, which only targets MySQL JDBC driver-specific dangerous parameters. An attacker can bypass these controls by switching the JDBC URL protocol to jdbc:postgresql: and exploiting PostgreSQL JDBC driver-specific parameters such as socketFactory and socketFactoryArg. This allows unauthenticated attackers to execute arbitrary code on the H2O-3 server with the privileges of the H2O-3 process. The issue is resolved in version 3.46.0.10.
AnalysisAI
Remote code execution in H2O-3 versions 3.46.0.9 and earlier allows unauthenticated attackers to execute arbitrary code via the /99/ImportSQLTable REST API by abusing PostgreSQL JDBC driver parameters that bypass an incomplete MySQL-only parameter blacklist. No active exploitation is recorded in CISA KEV and EPSS is low (0.19%), but a vendor patch is available and SSVC marks exploitation status as POC, indicating proof-of-concept-grade attacker capability against a network-reachable endpoint.
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all H2O-3 installations, confirm which are running versions 3.46.0.9 or earlier, and document which are accessible from untrusted networks. Within 7 days: Apply the vendor-released patch to all affected instances; consult the official H2O-3 security advisory for the patched version number and deployment instructions specific to your infrastructure. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today