SNEAKY WRITE HOOK: GIT CLONE TO ROOT ON K8S NODES

Summary from the TLDR InfoSec newsletter

The gitRepo volume driver is a deprecated k8s storage driver that allows for reading files into a pod from a remote git repository. This post examines a vulnerability in the gitRepo driver whereby a maliciously crafted git repository could sneak git hooks into a node and execute commands as root. The authors submitted a PR to fix this issue which will be released in version 1.31.