container-k8s-escape

name	container-k8s-escape
description	Use when breaking out of a container or escalating inside Kubernetes — runc/BuildKit CVEs, privileged/capability/cgroup misconfig escapes, NVIDIA GPU toolkit escape, K8s RBAC abuse, kubelet RCE, ingress/admission-controller RCE, node-to-cluster pivot
metadata	{"type":"offensive","phase":"exploit-install-actions","tools":"kubectl, crictl, runc, deepce, cdk, kube-hunter, peirates, amicontained, trufflehog, falco, kubeletctl, nsenter","mitre":["T1611","T1610","T1613","T1552.001","T1552.007","T1078.001","T1068","T1496"]}
kill_chain	{"phase":["exploit","install","actions"],"step":[4,5,7],"attck_tactics":["TA0002","TA0004","TA0005","TA0006","TA0008"],"attck_techniques":["T1611","T1610","T1613","T1609","T1552.001","T1552.007","T1078.001","T1068","T1496","T1610"]}
depends_on	["recon-osint","cloud-security","vulnerability-analysis"]
feeds_into	["cloud-security","red-team-ops","privesc-linux","active-directory-attack"]
inputs	["container_context","k8s_service_account","kubeconfig","node_access","registry_push_access"]
outputs	["host_root_shell","node_compromise","stolen_sa_tokens","cluster_admin","attack_path","escape_finding"]
references	["references/runtime-cve-escapes.md","references/privileged-misconfig-escape.md","references/nvidia-gpu-escape.md","references/k8s-rbac-escalation.md","references/ingress-admission-attacks.md","references/node-host-pivot.md"]
scripts	["scripts/escape_enum.sh","scripts/runc_cwd_escape.py","scripts/release_agent_escape.sh","scripts/nvidiascape_build.sh","scripts/k8s_rbac_audit.py","scripts/kubelet_exec.py"]

Container Breakout & Kubernetes Escape

When to Activate

• You have code execution inside a container/pod and want to break out to the host node
• Auditing a Kubernetes cluster for RBAC privilege-escalation and lateral-movement paths
• Assessing runc/containerd/BuildKit/Docker runtime versions against known escape CVEs
• A pod is privileged, has dangerous capabilities, hostPath/hostPID/hostNetwork, or a mounted docker.sock
• Attacking GPU/AI workloads using the NVIDIA Container Toolkit
• Testing ingress-nginx / admission-controller exposure for unauthenticated RCE
• Post-escape: pivoting from one node to full cluster takeover (kubelet, SA tokens, etcd, cloud IMDS)
• Building Falco/Sigma detections for container-escape behavior (defensive validation)

Technique Map

Technique	ATT&CK	CWE	Reference	Script
runc working-dir fd leak escape (Leaky Vessels, CVE-2024-21626)	T1611	CWE-403	references/runtime-cve-escapes.md	scripts/runc_cwd_escape.py
runc masked-path / /dev/null symlink escape (CVE-2025-31133)	T1611	CWE-367	references/runtime-cve-escapes.md	scripts/runc_cwd_escape.py
runc /dev/console bind-mount + LSM bypass (CVE-2025-52565/52881)	T1611	CWE-363	references/runtime-cve-escapes.md	scripts/escape_enum.sh
BuildKit cache/teardown symlink escape (CVE-2024-23651/52/53)	T1611	CWE-59	references/runtime-cve-escapes.md	scripts/escape_enum.sh
Privileged / CAP_SYS_ADMIN cgroup release_agent escape	T1611	CWE-269	references/privileged-misconfig-escape.md	scripts/release_agent_escape.sh
core_pattern host-side code exec on crash	T1611	CWE-269	references/privileged-misconfig-escape.md	scripts/release_agent_escape.sh
hostPID + nsenter into PID 1 namespace	T1611	CWE-668	references/privileged-misconfig-escape.md