writeups.xyz / Sys:All: How A Simple Loophole in Google Kubernetes Engine Puts Clusters at Risk of Compromise

Submitter : c2a

Date: 24 January 2024

Bounty : undisclosed

Vulnerabilities :

• Kubernetes
• Cloud
• Privilege Escalation

Programs :

• Google (GKE)

Authors :

• Roi Nisimi (@Roinisimi)
• Ofir Yakobi

Link :
https://orca.security/resources/research-pod/sys-all-google-kubernetes-engine-risk/