Config files : Wrong access configuration

A microservice is run with root privileges in the container. While there’s still some default protection left (Linux capabilities, either AppArmor or SELinux profiles) it removes one layer of protection. This extra layer broadens the attack surface. It also violates the least privilege principle and from the OWASP perspective is an insecure default.

For privileged containers (with privileged flag), a microservice breakout into the container is almost comparable to running without any container. Privileged containers endanger your whole host and all other containers.