PwnEscape: Guest-to-Host KVM escape detailed as CVE-2026-99999
chillax · hn · 2026-10-16
A Hacker News discussion links to pwn.ai's writeup of PwnEscape (CVE-2026-99999), a KVM guest-to-host escape vulnerability that lets an attacker break out of a virtual machine onto the host—a high-severity class of virtualization flaw with implications for cloud infrastructure running KVM. Technical details are in the blog post, with HN commenters digging into the exploit mechanics and blast radius.
More from Safety
- Crime group used Claude, Grok and Kimi agents to attack 400+ banks in Latin America — anshulkundaje · 2026-10-23
- Greg Brockman: AI makes hacking 100x more profitable and easier, upending hacker economics — gabriel1 · 2026-10-23
- Account hacks surge: 6-step emergency checklist plus an AI audit prompt — petergyang · 2026-10-23
- For consumer AI founders, 'When are you launching in Europe?' is the new 'When Android?'—only 100x worse — omooretweets · 2026-10-23
- mmitchell_ai questions whether the AI safety vs security framing stems from EA — mmitchell_ai · 2026-10-23
- MPI-Sec PhD Thesis on Vulnerability Detection Benchmarks Includes Pre-LLM Classic "Top Score on the Wrong Exam" — mboehme_ · 2026-10-23