Skip to content
Threat Feed

Vendor

H2oai

1 brief RSS
high advisory

Deserialization Vulnerability in H2Oai H2O-3 (CVE-2026-8751)

A deserialization vulnerability exists in h2oai's h2o-3 up to version 7402, specifically within the importBinaryModel function of the h2o-core/src/main/java/hex/Model.java file's JAR Handler component, allowing remote exploitation through manipulation.

h2o-3 deserialization rce cve
2r 1t 1c