Kubernetes Privileged Container Escape to Host

A Kubernetes container may escape isolation and access its underlying node through host exposure or excessive container privileges. MITRE ATT&CK T1611 includes privileged-container and host-filesystem access as examples. The nsenter example below is conditional: it requires a target process in the intended host namespaces and permission to join them; a privileged Pod alone does not establish host PID visibility or host-root identity.