A critical bug in Kubernetes Image Builder could allow unauthorized SSH access to virtual machines (VMs) due to default credentials being enabled during the image build process. Image Builder is a tool used to build Kubernetes VMs images across multiple infrastructure providers – and images it creates include default credentials which can be used to gain root access to VMs.

Source: The Register