Kubernetes Security Audit: What the CNCF’s First Independent Review Found
The Cloud Native Computing Foundation commissioned the first independent security audit of Kubernetes, conducted by Trail of Bits and Atredis Partners. The review of Kubernetes 1.13.4 uncovered 37 vulnerabilities—including five high-severity issues—and highlighted systemic problems with defaults, documentation, and operational complexity.