Exposure of Sensitive Information via Arbitrary System Path Lookup in h2oai/h2o-3

published 2024-06-06 2 y ago modified 2026-07-07 4 mo ago also GHSA-x234-r5fg-x52m , PYSEC-2026-1446 , EUVD-2024-2199

cvss: 5.3; version 3.0, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.8%; EPSS 0.8% chance of exploitation in 30 days, percentile 57%
public exploits: 0; none known

In h2oai/h2o-3 version 3.40.0.4, an exposure of sensitive information vulnerability exists due to an arbitrary system path lookup feature. This vulnerability allows any remote user to view full paths in the entire file system where h2o-3 is hosted. Specifically, the issue resides in the Typeahead API call, which when requested with a typeahead lookup of '/', exposes the root filesystem including directories such as /home, /usr, /bin, among others. This vulnerability could allow attackers to explore the entire filesystem, and when combined with a Local File Inclusion (LFI) vulnerability, could make exploitation of the server trivial.

CISA SSVC

Exploitation: Proof of concept is public
Automatable: no
Technical impact: partial
Assessed: 2 y ago (2024-06-07)

Exploit prediction

0.83% chance of exploitation in the next 30 days, higher than 57% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

huntr.com https://huntr.com/bounties/e76372c2-39be-4984-a7c8-7048a75a25dc referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	3.0	5.3	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD	3.1	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
GitHub	3.0	5.3	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
OSV	3.0	5.3	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected packages

ecosystem	package	affected	fixed in
pypi	h2o	<=3.40.0.4	no fix listed

Affected products

h2oai h2oai/h2o-3
h2oai h2oai\/h2o-3

Classification

Weakness

CWE-22 Improper Limitation of a Pathname to a Restricted Directory
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

huntr.com /bounties/e76372c2-39be-4984-a7c8-7048a75a25dc
web, exploit, third-party-advisory
nvd.nist.gov /vuln/detail/CVE-2024-5550
advisory
github.com /h2oai/h2o-3
package
pypi.org /project/h2o
package
github.com /advisories/GHSA-x234-r5fg-x52m
advisory

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary