Kubernetes Attack Lets Hackers Steal SPIFFE Workload Identities and Impersonate Applications
Unit 42 detailed a Kubernetes technique where node-root attackers spoof cgroup selectors to steal SPIFFE/SPIRE workload identities and impersonate applications.
Palo Alto Networks Unit 42 described a post-exploitation technique in which an attacker with root access to a Kubernetes node manipulates cgroup metadata so the local SPIRE agent issues valid SVIDs belonging to co-located workloads. Stolen X.509 or JWT SVIDs let the attacker impersonate victim applications over mutual TLS or pass identity-aware authorization, turning node compromise into lateral movement and privilege escalation. Unit 42 said it has not observed exploitation in the wild and released the open-source Spooffe tool so defenders can measure which identities are harvestable per node.
- Root compromise of a Kubernetes node exposes every workload identity issued to workloads on that node.
- Attackers spoof cgroup selectors so the SPIRE agent issues victim SVIDs to attacker-controlled processes.
- Stolen SVIDs enable mTLS impersonation and identity-based authorization bypass for lateral movement.
- Unit 42 released Spooffe, an open-source tool to test which SVIDs are harvestable per node.
- Defenders should harden nodes, restrict privileged containers, and avoid overly broad workload selectors.
- Vendors
- Palo Alto Networks
- Products
- SPIFFESPIREKubernetesSpooffe
- Organizations
- Unit 42
From the original article
3 min read at gbhackers.com
A post-exploitation technique that lets attackers with root-level access to a Kubernetes node steal workload identities issued through SPIFFE/SPIRE and impersonate legitimate applications running on the same host. The technique undermines the node-trust assumption behind cloud-native machine identity systems, potentially enabling attackers to access services protected by mutual TLS and identity-based authorization.
By Mayura Kathir · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.