DUAL PRIVILEGE ESCALATION CHAIN: EXPLOITING MONITORING AND SERVICE MESH CONFIGURATIONS AND PRIVILEGES IN GKE TO GAIN UNAUTHORIZED ACCESS IN KUBERNETES

Summary from the TLDR InfoSec newsletter

An attacker with access to a Kubernetes cluster can chain two vulnerabilities in Google Kubernetes Engine (GKE) to escalate privileges and take over the cluster. The recently identified vulnerabilities in FluentBit and ASM can be exploited as part of the second stage of an attack, provided that the attacker has achieved remote code execution in the FluentBit container or that they can break out of another container.