Pepr's Open Door: The Perils of Default 'Admin' Mode

Executive Summary (TL;DR)

Pepr, a TypeScript framework for Kubernetes, essentially gives root privileges (`cluster-admin`) to any module created with its default settings. If an attacker compromises a Pepr module—perhaps through a dependency vulnerability or bad custom code—they inherit full control over the entire cluster. The fix? A console warning telling you not to do that in production.