CVE-2025-56819

moderate-risk
Published 2025-09-24

An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.

Do I need to act?

~
9.6% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Datart

Affected Vendors

Running-Elephant

References (3)

Not Applicable https://github.com/h2database/h2database
Third Party Advisory https://github.com/xyyzxc/CVE-2025-56819
Not Applicable https://h2database.com/html/features.html#runscript
48
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 11/34 · Low
Exposure 5/34 · Minimal