Processes with in container can gain additional privileges is if allowPrivilegeEscalation is not set.

Remediation

apiVersion: apps/v1
kind: Deployment
spec:
  template:
    spec:
      containers:
      - name: myContainer
        securityContext:
          allowPrivilegeEscalation: false

Metadata

• Severity: high
• Slug: privilege-escalation-in-kubernetes

CWEs

• 250: Execution with Unnecessary Privileges

OWASP

• A04:2021: Insecure Design