Kubernetes Remote Code Execution Via Nodes/Proxy GET Permission
grahamhelton.com
An authorization bypass in Kubernetes RBAC allows for nodes/proxy GET permissions to execute commands in any Pod in the cluster.

It is not an universal RCE (it works from a service account with the correct permissions).