How One Kubernetes YAML Can Hand Over a GCP Organization

A Kubernetes user with limited permissions can exploit Google Kubernetes Config Connector to gain control of an entire GCP organization, according to Varonis. This confused deputy problem allows a single YAML file to escalate privileges organization-wide, potentially compromising all resources. The research highlights a critical security risk for enterprises using Config Connector.