huawei-cloud-cce-chaos-experiment
Warn
Audited by Socket on Sep 30, 2026
1 alert found:
AnomalyAnomalyscripts/deploy_experiment.sh
LOWAnomalyLOW
scripts/deploy_experiment.sh
This script does not itself execute the outage, but untrusted experiment paths can inject Python into the parsing command, and untrusted JSON values can inject shell commands into the generated rollback script. Treat the experiment directory and its contents as trusted only, or use safe argument passing and shell escaping/validation before execution.
Confidence: 98%Severity: 68%
Audit Metadata