Kaspersky shows an isolation bypass in cloud infrastructures

A Kaspersky expert presented a case of isolation bypass in cloud infrastructures, a work that earned recognition at the Russian Pentest Award 2026.

The analysis shows how a chain of vulnerabilities present in Kubernetes, Konnectivity, and the overlay network can lead to remote code execution (RCE). By exploiting these flaws, it becomes possible to bypass security restrictions and directly compromise services belonging to other tenants present in the same shared infrastructure.

This scenario highlights the security risks associated with multi-tenant cloud environments, where the presence of an insecure element can jeopardize the entire isolation system between different users.