Security2 hOctober 6, 2026, 09:06

Researcher claims full KVM guest-to-host escape flaw

Security researcher Paulos Yibelo reported a 0-day full guest-to-host root escape in Linux KVM, confirmed via Vercel's Sandbox bug bounty. Vercel's Sandbox runs on Firecracker MicroVMs, which rely on KVM; no technical details are public yet.

The Register

Open source

Researcher claims full KVM guest-to-host escape flaw

Flaw allows escape from guest VM to host root
Bug confirmed through Vercel Sandbox bounty program
KVM powers AWS, Google, Nutanix, HPE and Proxmox
Vercel bounty caps rewards at $50,000

#KVM#Firecracker#Vercel#AWS

Repeated VM Escapes By GPT-5.6-Cyber Based Agents Prove VMs and OS' Require Better Maintenance

Security

Researchers escape OpenAI Codex sandbox to run commands on host

Security

Researcher maps ~300,000 Flock Safety devices, double the company's claimed 120,000

Security

Researcher claims full KVM guest-to-host escape flaw

Repeated VM Escapes By GPT-5.6-Cyber Based Agents Prove VMs and OS' Require Better Maintenance

Researchers escape OpenAI Codex sandbox to run commands on host

Researcher maps ~300,000 Flock Safety devices, double the company's claimed 120,000

Linux KVM ARM64 Flaw Lets Guests Read and Write Host Memory