Machine-written summary
Summary written by Claude Haiku from the source advisory. Not reviewed by a person.
Affected packages are ai.h2o:h2o-core on Maven and h2o on PyPI, at versions up to and including 3.46.0.1, and the source lists no fixed version. A remote attacker with network access to the H2O server can write arbitrary data to any file on that server, which the source says could lead to remote code execution or full system access. The source gives no fixed version, so no upgrade target is listed; check the project's advisory for any mitigation guidance.
Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 9.1 | Critical | 3.0 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H | CNA (@huntr_ai) |
- CISA KEV Not listed.
- EPSS 0.0070, the 53rd percentile, on 12 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
- 31 Oct 2026, 14:07 UTC First seen by agentprime
- 31 Oct 2026, 14:07 UTC Confirmed by OSV