OpenCartridge security audit: no auth, open storage bucket, and Docker socket access
maier_ak · x · 2026-11-13
Andreas Maier reviews camenduru's open-source OpenCartridge (MIT), a toolkit for running image-to-3D models (like the Idol 3D cartridge) on local NVIDIA GPUs — one toy axolotl photo yields a rotatable 3D model. Hardware bar: 24GB VRAM per worker, multi-GB cartridge downloads, no Macs.
The "price of one click": the app has no authentication, its web UI and storage bucket are network-exposed and world-readable/writable, the container mounts the host's Docker socket (effectively full machine control), a self-update button pulls the latest GitHub commit without version pinning or signature checks, and worker images use the "latest" tag. Common for hobby tooling around open models, but the author advises running it only on an isolated machine.
More from Infra
- kagent 1.0 GA: Agent Substrate brings sandboxed AI agent execution to Kubernetes beyond pod-per-agent — bibryam · 2026-11-13
- 4x R9700 EXL3 serving: 1,094 tok/s Qwen decode, all optimization tricks open-sourced — mikoskinen · 2026-11-13
- Sweden's all-wood EcoDataCenter: 1.15 PUE, just 1.17g CO2/kWh, zero water use — filwi · 2026-11-13
- Strata EXL3 AMD fork gains 10-20% tok/s, runs 3bpw at IQ4-level quality — nasone32 · 2026-11-13
- Swapping one month of Scaleway bills for a 16GB ThinkCentre to run agents locally — jiayuan_jy · 2026-11-13
- From reform-school toilets to $5T: a timeline of Jensen Huang and NVIDIA — tibo_maker · 2026-11-13