CVE-2024-6854
published 2025-03-20CVE-2024-6854: In h2oai/h2o-3 version 3.46.0, the endpoint for exporting models does not restrict the export location, allowing an attacker to export a model to any file in…
PriorityP337high7.1CVSS 3.0
AVNACLPRLUINSUCNILAH
EPSS
0.69%
48.3th percentile
In h2oai/h2o-3 version 3.46.0, the endpoint for exporting models does not restrict the export location, allowing an attacker to export a model to any file in the server's file structure, thereby overwriting it. This vulnerability can be exploited to overwrite any file on the target server with a trained model file, although the content of the overwrite is not controllable by the attacker.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| h2o | h2o | — | — |
| h2o | h2o | 3.32.1.1 – 3.46.0 | — |
| h2oai | h2oai_h2o-3 | unspecified – latest | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
H2O Vulnerable to Arbitrary File Overwrite via File Export
ghsa·2025-03-20
CVE-2024-6854 [HIGH] CWE-36 H2O Vulnerable to Arbitrary File Overwrite via File Export
H2O Vulnerable to Arbitrary File Overwrite via File Export
In h2oai/h2o-3 version 3.46.0, the endpoint for exporting models does not restrict the export location, allowing an attacker to export a model to any file in the server's file structure, thereby overwriting it. This vulnerability can be exploited to overwrite any file on the target server with a trained model file, although the content of the overwrite is not controllable by the attacker.
OSV
H2O Vulnerable to Arbitrary File Overwrite via File Export
osv·2025-03-20
CVE-2024-6854 [HIGH] H2O Vulnerable to Arbitrary File Overwrite via File Export
H2O Vulnerable to Arbitrary File Overwrite via File Export
In h2oai/h2o-3 version 3.46.0, the endpoint for exporting models does not restrict the export location, allowing an attacker to export a model to any file in the server's file structure, thereby overwriting it. This vulnerability can be exploited to overwrite any file on the target server with a trained model file, although the content of the overwrite is not controllable by the attacker.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-03-20
Published