HighVulnerability
CVE-2024-6960: H2O machine learning platform deserialization of untrusted model data
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2024-6960
- Published
- Record updated
- Affected
- ai.h2o:h2o-core <= 3.46.0.4
- Fixed in
- No fixed version was stated when the source was last read.
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.7%
Summary
CVE-2024-6960 affects the H2O machine learning platform, which uses "Iced" classes to move Java objects around the cluster. The Iced format can carry serialized Java objects, and when a model is deserialized, any class is allowed, with no class whitelist. An attacker can craft an Iced model that uses Java gadgets and, when imported into H2O, achieve arbitrary code execution. The weakness is classified as CWE-502, Deserialization of Untrusted Data.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database
- HighCVE-2026-118623: MLflow PickleEvaluationArtifact remote code execution via untrusted pickleSimilar attack · NVD/CVE Database
- HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSimilar attack · NVD/CVE Database