Prowler < 5.36.0 accepts kubeconfig_content with legacy gcp auth-provider config.cmd-path/config.cmd-args during POST /api/v1/providers/{id}/connection. Because kubeconfig_contains_exec_auth checks only exec blocks, config.load_kube_config_from_dict triggers kubernetes-python CommandTokenSource.token to run attacker commands via subprocess.Popen on the shared worker. Upgrade to 5.36.0.