Live › vulnerability › CVE-2023-6569
Go to dashboardH2O-3 writes exported data to disk using a path an attacker can influence, so a remote unauthenticated request can overwrite arbitrary files on the server. The written content is partly controllable, which is enough to damage files or plant payloads that other processes read.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:35 UTC, 0h before NVD. All times on this page are UTC.
Teams that run an H2O-3 server (the h2o Python package starts one) with its API reachable over the network are exposed. Local-only notebook use on a machine without a reachable port is much lower risk, and teams already on 3.46.0.1 or later are not affected.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| h2o | pypi | < 3.46.0.1 | 3.46.0.1 |
| h2o | vendor | = 3.40.0.4 | – |
pip show h2o and confirm the installed version is below 3.46.0.1.h2o Python package to 3.46.0.1 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Remote unauthenticated attackers can overwrite arbitrary server files with attacker-controllable data. The data that the attacker can control is not entirely arbitrary. h2o writes a CSV/XLS/etc file to disk, so the attacker data is wrapped in quotations and starts with "C1", if they're exporting as CSV.
This page as .md · .json · in your agent: get_signal("CVE-2023-6569")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.