Live › vulnerability › CVE-2024-5986
Go to dashboardH2O-3 machine learning server lets remote users write arbitrary data to any file on the host through the /3/Parse and /3/Frames export endpoints. An attacker can overwrite files such as SSH keys or scripts, which can lead to remote code execution and full system takeover.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:35 UTC, 0h before NVD. All times on this page are UTC.
Teams running H2O-3 (h2o-core or the Python h2o package) as a server that accepts requests over a network. Exposure depends on whether the /3/Parse and /3/Frames endpoints are reachable by untrusted clients; the sources do not say whether authentication is required. Teams only using H2O locally in a notebook on a trusted machine are at much lower risk.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ai.h2o:h2o-core | maven | <= 3.46.0.1 | – |
| h2o | pypi | <= 3.46.0.1 | – |
pip show h2o or the Maven ai.h2o:h2o-core version; affected versions are 3.46.0.1 and below./3/Parse and /3/Frames are exposed.h2o PyPI package and ai.h2o:h2o-core Maven artifact to a fixed release; the fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in h2oai/h2o-3 version 3.46.0.1 allows remote attackers to write arbitrary data to any file on the server. This is achieved by exploiting the /3/Parse endpoint to inject attacker-controlled data as the header of an empty file, which is then exported using the /3/Frames/framename/export endpoint. The impact of this vulnerability includes the potential for remote code execution and complete access to the system running h2o-3, as attackers can overwrite critical files such as private SSH keys or script files.
This page as .md · .json · in your agent: get_signal("CVE-2024-5986")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.