Google Cloud Resolves Privilege Escalation Flaw Impacting Kubernetes Service

Google Cloud patched a medium-severity privilege-escalation vulnerability affecting Google Kubernetes Engine (GKE) and Anthos Service Mesh (ASM) in which a threat actor who had already compromised a Fluent Bit logging container could access service account tokens on the node and leverage ASM's permissions to create cluster-admin pods, enabling data theft, deployment of malicious pods, or disruption; Palo Alto Networks Unit 42 reported the issue, there is no evidence of active exploitation, and Google released fixes and reworked Fluent Bit/ASM permissions in specific GKE and ASM versions.