PT-2025-12172 · H2O.Ai · H2O-3

Published 2025-03-20 · Updated 2025-03-20 · CVE-2024-6863

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions h2oai/h2o-3 version 3.46.0

Description The issue allows an attacker to encrypt any files on the target server with a key of their choosing through an endpoint exposing a custom EncryptionTool. This can result in ransomware-like behavior, making it difficult for the target to recover the keys needed for decryption. The attacker can also overwrite the chosen key.

Recommendations For h2oai/h2o-3 version 3.46.0, consider disabling access to the custom EncryptionTool endpoint as a temporary workaround until a patch is available. Restrict access to sensitive files and directories to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-749

Related Identifiers

CVE-2024-6863

GHSA-M37H-8R48-2CXJ

Affected Products

H2O-3

References · 7

• 🔥 https://huntr.com/bounties/10f55937-0cba-4530-897f-2abf30ed5270 · Exploit
• https://osv.dev/vulnerability/CVE-2024-6863 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m37h-8r48-2cxj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6863 · Security Note
• https://github.com/h2oai/h2o-3 · Note
• https://github.com/h2oai/h2o-3/blob/a20b5b19b769866ee24b217ee78b820e64c1cd6a/h2o-core/src/main/java/water/tools/EncryptionTool.java#L49 · Note
• https://twitter.com/CVEnew/status/1902671109507723693 · Twitter Post