thumbnail Can't Be Contained: Finding a Command Injection Vulnerability in Kubernetes