TF 0033 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Runs with a root primary or supplementary GID

Property Value
Language terraform
Severity low

Description

Containers are configured to run with a primary or supplementary group ID (GID) of 0, which means they operate with root group privileges. This configuration violates pod security standards that require containers to avoid running with root group access.

Impact

If exploited, a container running with root group privileges could allow processes to access or modify sensitive system files and resources, increasing the risk of privilege escalation or lateral movement within the cluster. This weakens isolation and may expose the environment to further attacks.