Kubernetes RCE Via Nodes/Proxy GET Permission Лучше описание не составить: anyone with access to a service account assigned nodes/proxy GET that can reach a Node’s Kubelet on port 10250 can send information to the /exec endpoint, executing commands in any Pod, including privileged system Pods, potentially leading to a full cluster compromise. Kubernetes AuditPolicy does not log commands executed through a direct connection to the Kubelet’s API. Полная статья: https://grahamhelton.com/blog/nodes-proxy-rce Disclosure Status: Won’t fix (Intended behavior) #k8s #pentest #redteam