Unauthenticated callers can send a malicious H2 JDBC URL to the testConnection API in Apache Gravitino. The URL contains an INIT parameter that the H2 database invokes, causing the server to execute arbitrary Java code with the privileges of the Gravitino process. This flaw is catalogued as CWE‑20, Improper Input Validation, and allows an attacker to fully compromise the confidentiality, integrity, and availability of the server.

Apache Gravitino versions before 1.2.1 are affected, provided the server is configured to use the H2 database engine. All releases in this series that include the testConnection endpoint and an H2 dependency are vulnerable. Deployments that have migrated to other databases or have H2 disabled are not susceptible.

The vulnerability carries a CVSS score of 9.1, classifying it as Critical. However, the EPSS score of less than 1 % indicates a very low probability of exploitation at the time of analysis. Attackers must be able to reach the testConnection API, meaning the threat is primarily internal or from an untrusted network that gains connectivity to the Gravitino service. In environments where H2 is used only for testing or local development behind internal firewalls, practical risk is reduced, but the vulnerability remains high severity if the endpoint is exposed. The vulnerability is not listed in CISA KEV, indicating no known widespread exploitation, but its high CVSS score still warrants immediate patching.