Escaping containers using the Dirty Pipe vulnerability | Datadog Security Labs

This post details the exploitation of the Dirty Pipe vulnerability to achieve container escape from unprivileged containers, specifically in Kubernetes environments. It explains how the vulnerability allows overwriting files, including the runC binary, and presents a proof-of-concept exploit. The post also discusses defense-in-depth strategies to mitigate such risks.