--- title: Kubernetes telemetry feature fully compromises clusters description: A security researcher discovered that Kubernetes' nodes/proxy GET call, commonly used by monitoring tools, can be exploited to execute privileged commands and... canonical: https://daily.dev/posts/kubernetes-telemetry-feature-fully-compromises-clusters-boiz0chx6 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Kubernetes telemetry feature fully compromises clusters | daily.dev og:description: A security researcher discovered that Kubernetes' nodes/proxy GET call, commonly used by monitoring tools, can be exploited to execute privileged commands and... og:url: https://daily.dev/posts/kubernetes-telemetry-feature-fully-compromises-clusters-boiz0chx6 og:image: https://api.daily.dev/og/posts/bOiz0Chx6.png og:image:alt: Kubernetes telemetry feature fully compromises clusters og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Kubernetes telemetry feature fully compromises clusters **[The New Stack](https://daily.dev/sources/newstack)** · 4 min read · 4 upvotes · 0 comments ## Summary A security researcher discovered that Kubernetes' nodes/proxy GET call, commonly used by monitoring tools, can be exploited to execute privileged commands and fully compromise clusters without leaving audit trails. The Kubernetes team classified this as intended behavior rather than a bug, with no CVE issued. The vulnerability affects 69 monitoring tools that rely on this permission. Until the fix (KEP-2862) arrives in Kubernetes 1.36, administrators should audit RBAC policies, restrict kubelet port access, and consider workload isolation technologies to mitigate risk. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Understanding Current Threats to Kubernetes Environments](https://daily.dev/posts/understanding-current-threats-to-kubernetes-environments-fxdltzw1h) · Unit 42 · 1 upvotes · 0 comments - [Why Kubernetes RBAC Misconfigurations Are the Easiest Privilege Escalation You’ll Ever Find](https://daily.dev/posts/why-kubernetes-rbac-misconfigurations-are-the-easiest-privilege-escalation-you-ll-ever-find-7zx0y67wq) · Cloud Native Now · 1 upvotes · 0 comments - [A Brief Deep-Dive into Attacking and Defending Kubernetes](https://daily.dev/posts/a-brief-deep-dive-into-attacking-and-defending-kubernetes-vxcbvujil) · Tech Lead Digest · 5 upvotes · 0 comments - [Kubernetes Security Mistake: Cluster Admin Everywhere](https://daily.dev/posts/kubernetes-security-mistake-cluster-admin-everywhere-seewrtwvu) · Medium · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#devops](https://daily.dev/tags/devops), [#kubernetes](https://daily.dev/tags/kubernetes), [#monitoring](https://daily.dev/tags/monitoring) [View this post on daily.dev](https://daily.dev/posts/kubernetes-telemetry-feature-fully-compromises-clusters-boiz0chx6) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Kubernetes telemetry feature fully compromises clusters","url":"https://daily.dev/posts/kubernetes-telemetry-feature-fully-compromises-clusters-boiz0chx6","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/kubernetes-telemetry-feature-fully-compromises-clusters-boiz0chx6"},"datePublished":"2026-01-28T18:32:35.425Z","dateModified":"2026-02-27T12:02:38.219Z","description":"A security researcher discovered that Kubernetes' nodes/proxy GET call, commonly used by monitoring tools, can be exploited to execute privileged commands and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8cbe9a76b7ada18a4359bff6cf63b0f8?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8cbe9a76b7ada18a4359bff6cf63b0f8?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"The New Stack","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The New Stack","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/newstack","url":"https://daily.dev/sources/newstack"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/kubernetes-telemetry-feature-fully-compromises-clusters-boiz0chx6","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":4},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,devops,kubernetes,monitoring","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The New Stack","item":"https://daily.dev/sources/newstack"},{"@type":"ListItem","position":3,"name":"Kubernetes telemetry feature fully compromises clusters"}]} ```