Kubernetes telemetry feature fully compromises clusters

2026-02-09

A Kubernetes design allows read-only nodes/proxy permissions to enable arbitrary and privileged command execution via kubelet access, impacting many monitoring tools. The issue is considered intended behavior, with mitigations advised until fine-grained authorization arrives in Kubernetes 1.36.