vastai
Fail
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The execute command allows for arbitrary bash command execution on remote GPU instances.
- [COMMAND_EXECUTION]: The copy command utilizes rsync with user-defined paths to manage file transfers.
- [REMOTE_CODE_EXECUTION]: The serverless deployment logic installs system and Python packages and runs arbitrary scripts from deployment packages.
- [REMOTE_CODE_EXECUTION]: The serialization system dynamically imports modules and instantiates classes from JSON data, presenting a code execution vector if the processed data is untrusted.
- [REMOTE_CODE_EXECUTION]: Archive extraction in the deployment process uses the fully_trusted filter, which disables security checks for path traversal.
- [EXTERNAL_DOWNLOADS]: Fetches deployment artifacts from remote storage providers as part of the worker initialization process.
Recommendations
- AI detected serious security threats
Audit Metadata