CVE-2024-10572
Denial of Service and Arbitrary File Write in h2oai/h2o-3
In h2oai/h2o-3 version 3.46.0.1, the run_tool command exposes classes in the water.tools package through the ast parser. This includes the XGBoostLibExtractTool class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Denial of Service and Arbitrary File Write in h2oai/h2o-3
In h2oai/h2o-3 version 3.46.0.1, the run_tool command exposes classes in the water.tools package through the ast parser. This includes the XGBoostLibExtractTool class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.
- Record
CVE-2024-10572- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
EUVDEUVD-2025-7098
In h2oai/h2o-3 version 3.46.0.1, the run_tool command exposes classes in the water.tools package through the ast parser. This includes the XGBoostLibExtractTool class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.
- Record
EUVD-2025-7098- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-wjpv-64v2-2qpq
H2O Vulnerable to Denial of Service (DoS) and File Write
In h2oai/h2o-3 version 3.46.0.1, the run_tool command exposes classes in the water.tools package through the ast parser. This includes the XGBoostLibExtractTool class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.
- Record
GHSA-wjpv-64v2-2qpq- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-94, CWE-400
- Updated
- 2026-11-02
NVD
In h2oai/h2o-3 version 3.46.0.1, the run_tool command exposes classes in the water.tools package through the ast parser. This includes the XGBoostLibExtractTool class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.
- Record
CVE-2024-10572- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
OSV
Denial of Service and Arbitrary File Write in h2oai/h2o-3
In h2oai/h2o-3 version 3.46.0.1, the run_tool command exposes classes in the water.tools package through the ast parser. This includes the XGBoostLibExtractTool class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.
- Record
CVE-2024-10572- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
OSVGHSA-wjpv-64v2-2qpq
H2O Vulnerable to Denial of Service (DoS) and File Write
In h2oai/h2o-3 version 3.46.0.1, the run_tool command exposes classes in the water.tools package through the ast parser. This includes the XGBoostLibExtractTool class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.
- Record
GHSA-wjpv-64v2-2qpq- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400, CWE-94
- Updated
- 2026-11-02
OSVPYSEC-2026-1444
H2O Vulnerable to Denial of Service (DoS) and File Write
In h2oai/h2o-3 version 3.46.0.1, the run_tool command exposes classes in the water.tools package through the ast parser. This includes the XGBoostLibExtractTool class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service.
- Record
PYSEC-2026-1444- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
h2oPyPI |
3.34.0.1 to 3.46.0.1 | None known |
ai.h2o:h2o-ext-xgboostMaven |
3.34.0.1 to 3.46.0.1 | None known |
h2oPyPI |
3.34.0.1 to 3.46.0.1, plus listed versions 3.34.0.33.34.0.73.34.0.83.36.0.23.36.0.3 Show 21 moreShow less3.36.0.43.36.1.13.36.1.23.36.1.33.36.1.43.36.1.53.38.0.13.38.0.23.38.0.33.38.0.43.40.0.13.40.0.23.40.0.33.40.0.43.42.0.13.42.0.23.42.0.33.42.0.43.44.0.13.44.0.23.44.0.3 |
None known |
ai.h2o:h2o-ext-xgboostMaven |
3.34.0.1 to 3.46.0.1, plus listed versions 3.34.0.33.34.0.43.34.0.53.34.0.63.34.0.7 Show 26 moreShow less3.34.0.83.35.0.23.36.0.13.36.0.23.36.0.33.36.0.43.36.1.13.36.1.23.36.1.33.36.1.43.36.1.53.38.0.13.38.0.23.38.0.33.38.0.43.40.0.13.40.0.23.40.0.33.40.0.43.42.0.13.42.0.23.42.0.33.42.0.43.44.0.13.44.0.23.44.0.3 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-10572 is a high vulnerability (CVSS 7.5) in H2o, published March 20, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.69%, the 52nd percentile. No source names a fixed version.
References
huntr.com/bounties/db8939a0-9be8-4d0f-a8b0-1bd181666da2
nvd.nist.gov/vuln/detail/CVE-2024-10572
github.com/h2oai/h2o-3/blob/5e45e780f597961bda73adff765976db975f204b/h2o-extensions/xgboost/src/main/java/water/tools/XGBoostLibExtractTool.java
pypi.org/project/h2o