Host Namespace Access Enabled

Description

Detects pods configured to access host namespaces (network, PID, or IPC).

What Shoulder detects

Pod is configured to access host namespaces (network, PID, or IPC).

How to fix

Remove or disable host namespace access.

```yaml
spec:
  hostNetwork: false
  hostPID: false
```

Learn more: https://shoulder.dev/learn/kubernetes/cwe-250/host-access

Applies to

Languages

📄 YAML

Frameworks

kubernetes

References

Documentation ↗ Learn about CWE-250

Scan for this issue

Detect with Shoulder CLI

npx @shoulderdev/cli trust --rule=kubernetes-host-access .