Public Report – Kubernetes 1.24 Security Audit

NCC Group conducted a security evaluation of Kubernetes 1.24.0 for the SIG Security third‑party audit (May–June 2022). The assessment identified multiple security findings, including administrative experience concerns, API Server–Kubelet communication flaws that could lead to privilege escalation, and input sanitization issues resulting in a limited authorization bypass (CVE-2022-3162); a public report is available for download.