Runs with UID <= 10000

Property
Language
Severity

Description#

Containers are configured to run with a user ID (UID) of 10,000 or lower, or do not explicitly set a UID. This can cause conflicts with system users on the host, increasing the risk of privilege escalation or unintended access.

Impact#

If exploited, attackers could leverage predictable or low-numbered UIDs to gain elevated privileges or interact with sensitive host resources, potentially compromising container isolation and system security.

Resolution#

Set ‘containers[].securityContext.runAsUser’ to an integer > 10000.