---
format: "aidr-story-markdown/v1"
id: "19e5a3d3b856bd20631f2915f952d33dca57ea6d0337ea7ea2ea61d42199dcf5"
canonical_url: "https://aidr.today/19e5a3d3?lang=en"
title: "Firecracker VM Escape: PwnEscape Part 2"
lang: "en"
requested_lang: "en"
available_langs: ["en","vi"]
translation_fallback: null
fallback_fields: []
published_at: "2026-11-07T08:44:02.000Z"
category: "Research"
topics: ["amazon","safety"]
source_urls: ["https://pwn.ai/blog/firecracker-escape","https://lobste.rs/s/wzz4u3/firecracker_vm_escape_pwnescape_part_2"]
summary: "A malicious guest crossed the Firecracker microVM boundary, resolved the live VMM from inside the VM, and took control of a root-run host process by turning a Linux networking flaw into a guest-to-host code-execution primitive."
---

# Firecracker VM Escape: PwnEscape Part 2

> [Open the canonical story](<https://aidr.today/19e5a3d3?lang=en>)

**Published:** 2026-11-07T08:44:02.000Z
**Category:** Research
**Topics:** amazon, safety

## Summary

A malicious guest crossed the Firecracker microVM boundary, resolved the live VMM from inside the VM, and took control of a root\-run host process by turning a Linux networking flaw into a guest\-to\-host code\-execution primitive\.

## Sources

- [Story source](<https://pwn.ai/blog/firecracker-escape>)
- [Discussion](<https://lobste.rs/s/wzz4u3/firecracker_vm_escape_pwnescape_part_2>)