Blog

Security Research

Git-Syncing into Trouble: Exploring Command Injection Flaws in Kubernetes

Tomer Peled is a Security Researcher at Akamai. In his daily job, he conducts research ranging from vulnerability research to OS internals. In his free time, he likes to cook, do Krav Maga, and game on his PC.

By looking into the git-sync use page, we can see that it supports many possible configuration parameters.

<p id="title-2d27391b29" data-cmp-data-layer="{"title-2d27391b29":{"@type":"akamai/components/title","repo:modifyDate":"2024-08-05T19:42:38Z","dc:title":"Executive summary

\r\n"}}">

Executive summary

\r\n Akamai researcher Tomer Peled found a design flaw in Kubernetes’ sidecar project git-sync that allows for potential command injection.…