CVE-2024-45758: H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL
H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command execution. Exploitation can occur when an attacker has access to post to the ImportSQLTable URI with a JSON document containing a connectionurl property with any typical JDBC Connection URL attack payload such as one that uses queryInterceptors.
Published Sep 6, 2024 · Updated Sep 23, 2025
Affected packages
ai.h2o:h2o-core
- Ecosystem
- Maven
- Affected
- <= 3.46.0.7
- Fixed in
- No patched version yet
- Check
mvn dependency:tree -Dincludes=ai.h2o:h2o-core
h2o
- Ecosystem
- PyPI
- Affected
- <= 3.46.0.7
- Fixed in
- No patched version yet
- Check
pip show h2o
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command execution. Exploitation can occur when an attacker has access to post to the ImportSQLTable URI with a JSON document containing a connection_url property with any typical JDBC Connection URL attack payload such as one that uses queryInterceptors.
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-45758
- https://gist.github.com/AfterSnows/c24ca3c26dc89ab797e610e92a6a9acb
- https://spear-shield.notion.site/Unauthenticated-Remote-Code-Execution-via-Unrestricted-JDBC-Connection-87a958a4874044199cbb86422d1f6068
- https://github.com/h2oai/h2o-3/issues/16425
- https://github.com/h2oai/h2o-3/issues/16622
- https://github.com/h2oai/h2o-3/pull/16624
- https://github.com/h2oai/h2o-3/commit/f714edd6b8429c7a7211b779b6ec108a95b7382d
- https://github.com/advisories/GHSA-hrmc-jmp7-mpm2
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology