Firecracker MicroVM Escape Allows Root Code Execution on Host
Researchers escape Firecracker microVM and achieve root code execution on the host by modifying saved registers in pt_regs.
Stories per day · 30 days
5 RSS
Relatedlinux8kvm7cve-2026-999996kernel5firecracker4vercel4linux-kernel3pwnescape3sandbox3virtualization3cloud2cve-2026-745802privilege-escalation2qemu2vhost2iotlb1kata-containers1networking1
26 stories, newest first · one card per story
Stories tagged #vm-escape
OpenAI paused frontier training 11 days after agent containment failures
A September 20 training run reached limited internet via a DNS error; later tests escaped VMs using Kata, gVisor and Docker flaws.
Linux networking flaw lets KVM guests escape to the host
Pwn.ai leaked host memory on Vercel production sandboxes and gained root on lab hosts; guest-only updates do not fix it.
2
Linux kernel patch closes PwnEscape KVM guest-to-host escape
CVE-2026-99999 lets an x86 KVM guest alter already-validated IP packets, read host memory, and potentially run code.
8
PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)
Researchers show CVE-2026-99999 lets a KVM guest escape to the host via Linux checksum handling.
Linux kernel gets a fix for a flaw that enabled attackers to escape VMs
Linux patched CVE-2026-99999, a networking flaw researchers used to escape VMs to the host.
13
Researchers Use AI to Discover Critical Linux Kernel Flaw That Enables Virtual Machine Escape
pwn.ai found Linux kernel flaw CVE-2026-99999, which leaked host memory and escaped a guest VM in lab tests.
Critical Linux Kernel Flaw Lets Attackers Escape Virtual Machines and Take Control of Hosts
Linux kernel flaw CVE-2026-99999 can let a guest VM leak host memory and, in a lab, run code on the host.
linux kernel: PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)
A write-up claims Linux KVM guest-to-host escape CVE-2026-99999, so far described as host-memory disclosure.
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
Linux kernel flaw CVE-2026-99999 lets guest VMs read host memory, shown on Vercel sandboxes but not exploited in the wild.
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
Linux vhost flaw CVE-2026-74580 lets local users gain root and, in some setups, escape a guest to the host.
CVE-2026-74580: Linux vhost stale IOTLB cache leading to LPE and VM escape
CVE-2026-74580 in Linux vhost lets local users gain kernel read/write and guests escape the VM.
Security researcher claims they found KVM guest-host escape flaw
Paulos Yibelo claims a KVM guest-to-host root escape zero-day found via Vercel’s Firecracker sandbox bounty.
13
Muse escapes containment
Meta patched a pre-launch Muse AI agent KVM escape that could have exposed internal databases.
Meta Rushed to Fix Muse ‘VM Escape' Vulnerability Immediately Before Launch
Meta rushed fixes for Muse AI agent VM-escape flaws, including one that could reach Meta's sensitive internal databases, with engineers warning of a future breach.
Vercel Confirms KVM Zero-Day VM Escape, Awards Researcher $50,000
Vercel confirmed researcher Paulos Yibelo's KVM zero-day guest-to-host root escape and paid a $50,000 bounty.
ESXi Exploitation in the Wild
Huntress stopped an intrusion that used a VMware ESXi VM-escape toolkit after SonicWall VPN access.
Linux KVM/arm64 Vulnerability Lets Attackers Escape Virtual Machines and Gain Host Access
CVE-2026-89775 lets a malicious ARM64 KVM guest skip TLB invalidation and access host memory.
Critical Linux KVM Flaw Enables Guest-to-Host Escape on ARM64 Systems
A Linux KVM bug on ARM64 with nested virtualization can let a guest read and write host kernel memory.
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
Linux kernel flaw CVE-2026-89775 lets ARM64 KVM guests read and write freed host memory, enabling guest-to-host escape.
3
Secure VMs for Kubernetes: Hardening Kata containers
A developer used AI agent Astra to cut ~60% of Kata Containers code, releasing a minimal-attack-surface fork for Kubernetes on Firecracker VMs.
1
CVE-2026-89775: Guest-to-Host Escape in KVM/arm64
Disclosed CVE-2026-89775 lets a guest VM escape to the host on KVM/arm64 systems with nested virtualization enabled.
From Hypervisor to Container: Cloud Security Vulnerabilities, Defense Mechanisms, and Open Challenges
Survey of 120+ cloud security papers (2008-2025) reviews hypervisor and container isolation attacks, scoring defenses with the ADPO framework and CIA impact scale.
Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
Broadcom patched two VMware Workstation and Fusion flaws, including critical integer overflow CVE-2026-59346 (CVSS 9.3), letting guest admins execute host code; no exploitation seen.