CHE machine-exec API exposed on TCP 3333 - it appears to require no authentication and able to obtain SSH private keys that are configured by other devspaces user. All Developer Workspace containers have a running machine-exec process exposed to the network (listening on 0.0.0.0:3333). This is seemingly part of Eclipse Che. The process currently runs without any authentication enabled. The process runs as the same user (basically “user”) as everything else inside the container. Anything on the same network segment, such as other Developer Workspace containers, can interact with the APIs exposed by this process. The API includes a jsonrpc websocket sub-API, which includes the means to run arbitrary commands.