CVE-2023-6569 External Control of File Name or Path in h2oai/h2o-3

Critical 9.3 Published 14 Dec 2023 Updated 22 May 2025

Attackers can manipulate file paths to read or modify arbitrary files in the H2O-3 machine learning library.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2023-6569?

CVE-2023-6569 is a critical path traversal vulnerability in h2oai/h2o-3, published on 14 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

External Control of File Name or Path in h2oai/h2o-3

Weakness: CWE-610, CWE-73

Which versions are affected by CVE-2023-6569?

3 open source packages ship an affected version, including h2o. It affects 1 product.

Package	Affected	Fixed in
`h2o` PyPI	All versions	`3.46.0.1`
`h2o` PyPI	All versions	`3.46.0.1`
`h2o` PyPI	All versions	`3.46.0.1`

Products include H2o H2o.

How do I fix CVE-2023-6569?

Upgrade h2o to 3.46.0.1 or later.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2023-6569 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-6569 exists.

Sources

Also known as GHSA-gqrq-j6pm-98c2, PYSEC-2026-350.