corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0877e-7feb-7364-99d3-4e7265928378

Kubernetes Remote Code Execution Via Nodes/Proxy GET Permission

grahamhelton.com · published 26 January 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at grahamhelton.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
40
Words captured
8,691

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/prometheus-community/helm-charts/blob/main/charts/prometheus/templates/clusterrole.yaml
github.com
https://github.com/grafana/helm-charts/blob/main/charts/promtail/templates/clusterrole.yaml
github.com
https://github.com/DataDog/helm-charts/blob/main/charts/datadog/templates/rbac.yaml
github.com
https://github.com/elastic/elastic-agent/blob/main/deploy/helm/elastic-agent/templates/agent/cluster-role.yaml
github.com
https://github.com/cilium/cilium/blob/main/install/kubernetes/cilium/templates/spire/agent/clusterrole.yaml
github.com
https://github.com/open-telemetry/opentelemetry-helm-charts/blob/main/charts/opentelemetry-kube-stack/templates/clusterrole.yaml
github.com
https://github.com/aquasecurity/trivy-operator/blob/main/deploy/helm/templates/rbac/clusterrole.yaml
github.com
https://github.com/newrelic/nri-kubernetes/blob/main/charts/newrelic-infrastructure/templates/clusterrole.yaml
github.com
https://github.com/wiz-sec/charts/blob/d16cff44a0937f0bb3cf3c30969976700d5b1fa0/wiz-sensor/templates/clusterrole.yaml
github.com
https://gist.github.com/grahamhelton/f5c8ce265161990b0847ac05a74e466a
gist.github.com
https://labs.iximiuz.com/tutorials/nodes-proxy-rce-c9e436a9
labs.iximiuz.com
https://grahamhelton.com/rss.xml
grahamhelton.com
https://loworbitsecurity.com/blog/
loworbitsecurity.com
https://grahamhelton.com/blog/kubenretes-auditpolicy
grahamhelton.com
https://kubernetes.io/docs/reference/access-authn-authz/kubelet-authn-authz/
kubernetes.io
https://raesene.github.io/blog/2024/11/11/When-Is-Read-Only-Not-Read-Only/
raesene.github.io
https://kubernetes.io/docs/concepts/security/rbac-good-practices/
kubernetes.io
https://kubernetes.io/docs/concepts/security/api-server-bypass-risks/
kubernetes.io
https://www.container-security.site/security_research/node_proxy.html
container-security.site
https://www.aquasec.com/blog/privilege-escalation-kubernetes-rbac/
aquasec.com
https://learn.cisecurity.org/l/799323/2025-09-23/4vkhlx
learn.cisecurity.org
https://github.com/kubernetes/kubernetes/blob/master/pkg/kubelet/server/auth.go
github.com
https://datatracker.ietf.org/doc/html/rfc6455
datatracker.ietf.org
https://github.com/vi/websocat
github.com
https://github.com/kubernetes/kubernetes/blob/master/pkg/kubelet/server/server.go
github.com
https://github.com/kubernetes/kubernetes/blob/master/pkg/registry/core/pod/rest/authorize.go
github.com
https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/2862-fine-grained-kubelet-authz/README.md
github.com
https://github.com/DataDog/helm-charts/blob/2c84698eacf1b6bdc0100134d1d8fd5fd84e0024/charts/datadog/templates/rbac.yaml
github.com
https://github.com/kubernetes/sig-release/tree/master/releases/release-1.36
github.com
https://github.com/kubernetes/kubernetes/issues/133515
github.com
https://kubernetes.io/docs/reference/command-line-tools-reference/feature-gates/
kubernetes.io
https://www.linkedin.com/in/iainsmart/
linkedin.com
https://www.linkedin.com/in/rorym/
linkedin.com
https://www.linkedin.com/in/jaybeale/
linkedin.com
https://www.linkedin.com/in/adkellas/
linkedin.com
https://x.com/vesnafvr
x.com
https://www.linkedin.com/in/markmmanning/
linkedin.com
https://www.linkedin.com/in/cjcullen/
linkedin.com
https://www.linkedin.com/in/julien-boeuf-15b8/
linkedin.com
https://www.linkedin.com/in/ayubyusuf/
linkedin.com