CVE-2024-10572
published 2025-03-20CVE-2024-10572: In h2oai/h2o-3 version 3.46.0.1, the `run_tool` command exposes classes in the `water.tools` package through the `ast` parser. This includes the…
PriorityP341high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
0.64%
45.9th percentile
In h2oai/h2o-3 version 3.46.0.1, the `run_tool` command exposes classes in the `water.tools` package through the `ast` parser. This includes the `XGBoostLibExtractTool` class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| h2o | h2o | — | — |
| h2o | h2o | 3.34.0.1 – 3.46.0.1 | — |
| h2oai | h2oai_h2o-3 | unspecified – latest | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
H2O Vulnerable to Denial of Service (DoS) and File Write
osv·2025-03-20
CVE-2024-10572 [HIGH] H2O Vulnerable to Denial of Service (DoS) and File Write
H2O Vulnerable to Denial of Service (DoS) and File Write
In h2oai/h2o-3 version 3.46.0.1, the `run_tool` command exposes classes in the `water.tools` package through the `ast` parser. This includes the `XGBoostLibExtractTool` class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.
GHSA
H2O Vulnerable to Denial of Service (DoS) and File Write
ghsa·2025-03-20
CVE-2024-10572 [HIGH] CWE-400 H2O Vulnerable to Denial of Service (DoS) and File Write
H2O Vulnerable to Denial of Service (DoS) and File Write
In h2oai/h2o-3 version 3.46.0.1, the `run_tool` command exposes classes in the `water.tools` package through the `ast` parser. This includes the `XGBoostLibExtractTool` class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-03-20
Published