CVE-2026-65700: h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API that allows unauthentica

h2oGPT versions up to 0.2.1 have a path traversal vulnerability (a flaw where attackers can navigate outside intended directories by using special path sequences) in its OpenAI-compatible files API that allows unauthenticated attackers to read, write, and delete files on the server. The vulnerability exists because the bearer token (a type of authentication credential) is used directly in file paths without validation, and the default API key is empty, so attackers can bypass authentication and potentially run arbitrary code by modifying startup files.