Kubernetes Privileged Pod & Container Escape (Management Plane)

nomit vyas@xoxo

•updated Jun 24, 2026•1•0•17

Detects the creation of Kubernetes pods with dangerous security settings that could lead to container escape or privilege escalation. This includes pods configured with hostNetwork enabled, allowing privilege escalation, running as root (UID 0), or abusing capabilities.