ShadowForge: Container Escape and Cluster Host Takeover via PodSpec Injection in NVIDIA AIStore
NVIDIA AIStore (< 5.0) ETL API (PUT /v1/etl) blindly deserialized user-supplied Kubernetes PodSpecs and submitted them to the Kubernetes API, enabling remote privileged container escape and root host takeover. NVIDIA removed the entire InitSpecMsg feature in AIStore v5.0 rather than patching it.