H2O has an External Control of File Name or Path vulnerability

緊急 9.1CVE-2024-5986 · GHSA-wj3h-wx8g-x699 · PYSEC-2026-353 · 02/02/2026 公開 · 17/06/2026 更新

要点

CVE-2024-5986 は ai.h2o:h2o-core, h2o に影響する深刻度「緊急」 (CVSS 9.1) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.70%（全脆弱性の 53.3% より高い）。
修正版の情報はまだありません。参考情報のベンダー勧告を確認してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
ai.h2o:h2o-core Maven	`≤ 3.46.0.1`	修正版なし
h2o PyPI	`≤ 3.46.0.1`	修正版なし

概要

A vulnerability in h2oai/h2o-3 version 3.46.0.1 allows remote attackers to write arbitrary data to any file on the server. This is achieved by exploiting the /3/Parse endpoint to inject attacker-controlled data as the header of an empty file, which is then exported using the /3/Frames/framename/export endpoint. The impact of this vulnerability includes the potential for remote code execution and complete access to the system running h2o-3, as attackers can overwrite critical files such as private SSH keys or script files.

NVD の説明

A vulnerability in h2oai/h2o-3 version 3.46.0.1 allows remote attackers to write arbitrary data to any file on the server. This is achieved by exploiting the `/3/Parse` endpoint to inject attacker-controlled data as the header of an empty file, which is then exported using the `/3/Frames/framename/export` endpoint. The impact of this vulnerability includes the potential for remote code execution and complete access to the system running h2o-3, as attackers can overwrite critical files such as private SSH keys or script files.