Privilege Escalation Allowed

Description

Detects containers with privilege escalation explicitly enabled.

What Shoulder detects

Container allows privilege escalation, which can enable attackers to gain additional privileges through exploits.

How to fix

Disable privilege escalation in securityContext.

```yaml
securityContext:
  allowPrivilegeEscalation: false
```

Learn more: https://shoulder.dev/learn/kubernetes/cwe-250/privilege-escalation

Applies to

Languages

📄 YAML

Frameworks

kubernetes

References

Documentation ↗ Learn about CWE-250

Scan for this issue

Detect with Shoulder CLI

npx @shoulderdev/cli trust --rule=kubernetes-allow-privilege-escalation .