Firecracker VM Escape: PwnEscape Part 2

Security researchers demonstrated a full guest-to-host escape in Firecracker v1.16.1, gaining code execution as root on the host by hijacking a vCPU thread's saved registers as it returned from KVM_RUN. The VM kept running and stayed reachable over SSH after the escape. The test setup ran without Firecracker's jailer, so production containment — privilege dropping and seccomp — needs separate assessment. It matters because Firecracker's job is to keep untrusted code inside a microVM, and an escape defeats the isolation it exists to provide.

• Lobsters (AI)2026-11-07 08:44