Home » Database

AVID-2026-R1371

Description

Denial of Service and Arbitrary File Write in h2oai/h2o-3 (CVE-2024-10572)

Details

In h2oai/h2o-3 version 3.46.0.1, the run_tool command exposes classes in the water.tools package through the ast parser. This includes the XGBoostLibExtractTool class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.

Reason for inclusion in AVID: CVE-2024-10572 affects h2o-3, a machine-learning framework used in AI pipelines. It allows denial of service and arbitrary file writes by exposing internal tool classes via an AST parser, a security vulnerability in a software component commonly used to build/train/deploy AI systems. This makes it a software supply-chain-relevant issue for general-purpose AI stacks. The CVE entry provides details and CVSS metrics supporting its severity.

References

Affected or Relevant Artifacts

  • Developer: h2oai
  • Deployer: h2oai
  • Artifact Details:
TypeName
Systemh2oai/h2o-3

Impact

AVID Taxonomy Categorization

  • Risk domains: Security
  • SEP subcategories: S0100: Software Vulnerability
  • Lifecycle stages: L06: Deployment

CVSS

Version3.0
Vector StringCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score7.5
Base Severity🔴 High
Attack VectorNETWORK
Attack Complexity🟢 Low
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability Impact🔴 High

CWE

IDDescription
CWE-94CWE-94 Improper Control of Generation of Code

Other information

  • Report Type: Advisory
  • Credits:
  • Date Reported: 2025-03-20
  • Version: 0.3.3
  • AVID Entry