NVIDIA / NVIDIA/NemoClaw

[GSI SA Team] - Running OpenShell + NemoCLaw with Root Access

Open
#3,711 4 comments 0 reactions 0 assignees View on GitHub
area: sandbox area: security
Dominant language
TypeScript
Stars
22.5k
Forks
3.1k
Avg merge
1d 1h
Merged PRs (30d)
715

Description

## Description

Bug Action and Disposition Guide: current version of NeMoClaw and suporting openshell software can be invoked from Linux command line with root access using sudo cmds

Description: Possible security issue for enterprise deployment if a developer or admin can run NeMoClaw with root access permission
-->

Software Version: https://github.com/NVIDIA/NemoClaw (Open-Source Release)

  • NeMoCalw Container Version (if applicable): 0.0.36
  • NV-Ingest Helm Chart Version (if applicable) https://github.com/NVIDIA/NemoClaw

Hardware SKU: local running instance A1000
--> A1000

Is this a blocker bug? (Yes/No)
--> No

STEPS TO REPRODUCE:

Sudo nemoclaw my-assistant connect

Sudo openshell sandbox create --gpu --from --name %0D%0A
sudo -s also works with the configuration commands

PLEASE REMEMBER TO:
1. Attach logs (if applicable)
2. Attach the file(s) that the issue can be reproduced with

## Bug Details

| Field | Value |
|-------|-------|
| Priority | Unprioritized |
| Action | Dev - Open - To fix |
| Disposition | Open issue |
| Module | Machine Learning - NemoClaw |
| Engineer | Aaron Erickson |
| Requester | Kyle Harbacek |
| Keyword | NemoClaw |
| Days Open | 10 |

---
[NVB#6159815]

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.