CVE-2026-8750

CVE-2026-8750 affects h2oai h2o-3 up to version 7402. The vulnerability lies in the ImportFile API’s ImportFile/PersistNFS.java importFiles() function, enabling remote information disclosure due to manipulation of file persistence. Multiple sources (NVD, Red Hat, CVE listings, and PT Security) de...