The growing adoption of cloud-native architectures has established Kubernetes as the default platform for orchestrating containerized workloads. Nevertheless, its complex and dynamic architecture considerably increases the attack surface. Security threats often originate from the combination of small misconfigurations across multiple domains, including overly permissive RBAC configurations, exposed control plane interfaces, and improperly secured pod capabilities, which together can enable container escape and full cluster takeover. While modern tools can scan for individual vulnerabilities or generate isolated alerts, they provide no way of reasoning about how weaknesses combine to form an attack path. This leaves defenders with an incomplete picture, making it difficult to assess threat severity or prioritize countermeasures.