A researcher gained root access to the host and was able to execute commands on other pods in GCP.

Mitigations include blocking network connections, removing unnecessary capabilities, and using a different IP address for the node.

More: https://medium.com/@chenshiri/taking-over-google-cloud-shell-by-utilizing-capabilities-and-kubelet-fd5e2417f286