Dolphindb Docker

• Analyzed: Apr 21, 2026, 12:51 PM
• Findings: 1
• Version: 1.4.1
• Hash: 499958d0a94416447eac9d0550db23d83f2cffb9049d8e99ec796cda8a56809b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle automates DolphinDB deployment but includes a high-risk configuration in `deploy-dolphindb.sh` and `SKILL.md` by mounting the host's entire `/etc` directory into the Docker container (`-v /etc:/dolphindb/etc`). While the documentation claims this is for 'License fingerprint collection,' it grants the container read access to sensitive host system files (e.g., passwd, hosts, etc.). There is no evidence of intentional exfiltration, but the broad permission is a significant security vulnerability.