Kubernetes RBAC Misconfiguration
Critical · Access Control · CWE-269
Description
Over-broad Roles/ClusterRoleBindings.
Root cause
cluster-admin for workloads/users.
Impact
Secret theft, workload takeover.
Detection
RBAC review; kubectl auth can-i.
Mitigation
Least-privilege Roles; separate namespaces.
Secure coding
Audit RBAC with tools; policy-as-code.
Safe lab example
lab-k8s-rbac
Practise related skills in Labs or deepen on Academy library.