cr8escape can allow arbitrary code and malware to be executed through CRI-O, and allow lateral movement even on systems that do not run Kubernetes.