An exposed Kubelets port in a vulnerable deployment allows an attacker to run commands without authentication remotely within containers.

Mirror here: https://nusgreyhats.org/write-ups/hitbgsecquals2018-babybaby/