Live › vulnerability › CVE-2025-6544
Go to dashboardH2O-3 versions up to and including 3.46.0.7 mishandle JDBC connection parameters, so a crafted value can bypass a regular expression check through double URL encoding. An attacker can read arbitrary files on the host and execute arbitrary code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:46 UTC, 0h before NVD. All times on this page are UTC.
Teams running H2O-3 servers at or below 3.46.0.7, including through the Python h2o package or the Java h2o-core artifact, are exposed. The sources say the issue affects all users of the affected versions and do not describe a required non-default setting. Systems that do not run these versions can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ai.h2o:h2o-core | maven | <= 3.46.0.7 | – |
| h2o | pypi | <= 3.46.0.7 | – |
| h2o | vendor | >= 3.0.0.2, <= 3.46.0.8 | – |
pip show h2o for the Python package, or inspect the ai.h2o:h2o-core Maven dependency version.h2o PyPI package and the ai.h2o:h2o-core Maven artifact to a version later than 3.46.0.7; the fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A deserialization vulnerability exists in h2oai/h2o-3 versions <= 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and using double URL encoding. This issue impacts all users of the affected versions.
This page as .md · .json · in your agent: get_signal("CVE-2025-6544")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.