ascend-docker
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
SecuritySecurityscripts/run-ascend-container.sh
MEDIUMSecurityMEDIUM
scripts/run-ascend-container.sh
No clear malicious behavior or embedded malware is present. The script is a functional Ascend NPU Docker launcher, but it presents a significant container-isolation risk by defaulting to --privileged and mounting host resources, including /home and system directories. Unquoted user-controlled variables and insufficient device-list validation can cause unintended Docker argument injection or malformed mappings. Use only with trusted local inputs and review whether privileged mode and writable host mounts are necessary.
Confidence: 98%Severity: 82%
Audit Metadata