CVE-2026-65700

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-65700
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-65700.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-65700
Published
2026-07-23T17:02:24.458Z
Modified
2026-07-25T04:14:51.589489874Z
Severity
  • 9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
h2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files API
Details

h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API that allows unauthenticated remote attackers to read, write, and delete arbitrary files accessible to the server process by supplying traversal sequences in the bearer token. The getuserdir function in openaiserver/backendutils.py uses the bearer token string unsanitized as a path component via os.path.join, and because the default API key is EMPTY authentication is bypassed, enabling attackers to traverse outside the intended user directory through the file content, delete, and upload endpoints to achieve remote code execution by writing to startup hooks or application-loaded files.

Database specific 
{
    "cwe_ids": [
        "CWE-22"
    ],
    "cna_assigner": "VulnCheck",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65700.json"
}
References

Affected packages

Git / github.com/h2oai/h2ogpt

Affected ranges

Type
GIT
Repo
https://github.com/h2oai/h2ogpt
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7cdc21fd3e151483fc4c6d39483216c887e8235b
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.2.1"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*
0.1.0
0.2.0
0.2.1
Other
client-nightly-2023-11-03
client-nightly-2023-11-04
client-nightly-2023-11-05
client-nightly-2023-11-06
client-nightly-2023-11-07
client-nightly-2023-11-08
client-nightly-2023-11-09
client-nightly-2023-11-10
client-nightly-2023-11-11
client-nightly-2023-11-12
client-nightly-2023-11-13
client-nightly-2023-11-14
client-nightly-2023-11-15
client-nightly-2023-11-16
client-nightly-2023-11-20
client-nightly-2023-11-21
client-nightly-2023-11-22
client-nightly-2023-11-23
client-nightly-2023-11-24
client-nightly-2023-11-25
client-nightly-2023-11-26
client-nightly-2023-11-27
client-nightly-2023-11-28
client-nightly-2023-11-29
client-nightly-2023-11-30
client-nightly-2023-12-01
client-nightly-2023-12-02
client-nightly-2023-12-03
client-nightly-2023-12-04
client-nightly-2023-12-05
client-nightly-2023-12-06
client-nightly-2023-12-07
client-nightly-2023-12-08
client-nightly-2023-12-09
client-nightly-2023-12-10
client-nightly-2023-12-11
client-nightly-2023-12-12
client-nightly-2023-12-13
client-nightly-2023-12-14
client-nightly-2023-12-15
client-nightly-2023-12-16
client-nightly-2023-12-17
client-nightly-2023-12-18
client-nightly-2023-12-19
client-nightly-2023-12-20
client-nightly-2023-12-21
client-nightly-2023-12-22
client-nightly-2023-12-23
client-nightly-2023-12-24
client-nightly-2023-12-25
client-nightly-2023-12-26
client-nightly-2023-12-27
client-nightly-2023-12-28
client-nightly-2023-12-29
client-nightly-2023-12-30
client-nightly-2023-12-31
client-nightly-2024-01-01
client-nightly-2024-01-02
client-nightly-2024-01-03
client-nightly-2024-01-04
client-nightly-2024-01-05
client-nightly-2024-01-06
client-nightly-2024-01-07
client-nightly-2024-01-08
client-nightly-2024-01-09
client-nightly-2024-01-10
client-nightly-2024-01-11
client-nightly-2024-01-12
client-nightly-2024-01-13
client-nightly-2024-01-14
client-nightly-2024-01-15
client-nightly-2024-01-16
client-nightly-2024-01-17
client-nightly-2024-01-18
client-nightly-2024-01-19
client-nightly-2024-01-20
client-nightly-2024-01-21
client-nightly-2024-01-22
client-nightly-2024-01-23
client-nightly-2024-01-25
client-nightly-2024-01-26
client-nightly-2024-01-27
client-nightly-2024-01-28
client-nightly-2024-01-29
client-nightly-2024-01-30
client-nightly-2024-01-31
client-nightly-2024-02-01
client-nightly-2024-02-02
client-nightly-2024-02-03
client-nightly-2024-02-04
client-nightly-2024-02-05
client-nightly-2024-02-06
client-nightly-2024-02-07
client-nightly-2024-02-08
client-nightly-2024-02-09
client-nightly-2024-02-10
client-nightly-2024-02-11
client-nightly-2024-02-12
client-nightly-2024-02-13
client-nightly-2024-02-14
client-nightly-2024-02-15
client-nightly-2024-02-16
client-nightly-2024-02-17
client-nightly-2024-02-18
client-nightly-2024-02-19
client-nightly-2024-02-20
client-nightly-2024-02-21
client-nightly-2024-02-22
client-nightly-2024-02-23
client-nightly-2024-02-24
client-nightly-2024-02-25
client-nightly-2024-02-26
client-nightly-2024-02-27
client-nightly-2024-02-28
client-nightly-2024-02-29
client-nightly-2024-03-01
client-nightly-2024-03-02
client-nightly-2024-03-03
client-nightly-2024-03-04
client-nightly-2024-03-05
client-nightly-2024-03-06
client-nightly-2024-03-07
client-nightly-2024-03-08
client-nightly-2024-03-09
client-nightly-2024-03-10
client-nightly-2024-03-11
client-nightly-2024-03-12
client-nightly-2024-03-13
client-nightly-2024-03-14

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-65700.json"