An unauthenticated kubelet API allows listing all pods on the node and executing commands in any pod. This bypasses Kubernetes RBAC because the kubelet API operates independently of the API server's authorization.