Kubernetes Flaws Let Hackers Jump From Containers to Cloud Accounts

This report warns that attackers are increasingly exploiting Kubernetes misconfigurations and a critical React2Shell RCE (CVE-2025-55182) to achieve remote code execution in containers, read mounted service account tokens and cloud credentials, and escalate into cloud accounts — enabling cryptomining, persistent backdoors, and theft of digital assets, as illustrated by a 2025 cryptocurrency exchange compromise; it details the common attack pattern and recommends identity-aware controls, strict RBAC/Pod Security Standards, short‑lived projected tokens, Kubernetes audit logging, and continuous runtime monitoring.