---
format: "aidr-story-markdown/v1"
id: "45bab6a84bf9db8fce33047baf3acb112a0a1bffcb71e1728b22582ed64e941b"
canonical_url: "https://aidr.today/45bab6a8?lang=en"
title: "PwnEscape's 9.3 CVSS KVM Flaw Gives VM Guests Root Host Control"
lang: "en"
requested_lang: "en"
available_langs: ["en","vi"]
translation_fallback: null
fallback_fields: []
published_at: "2026-10-15T18:39:19.000Z"
category: "Research"
topics: ["openai","llm","safety"]
source_urls: ["https://marketbrief.now/cybersecurity/pwnescapes-93-cvss-kvm-flaw-gives-vm-guests-root-host-control-d1e65905","https://huggingnews.com/cybersecurity/pwnescapes-93-cvss-kvm-flaw-gives-vm-guests-root-host-control-d1e65905","https://lobste.rs/s/np84oh/pwnescape_guest_host_kvm_escape_cve_2026","https://pwn.ai/blog/pwnescape"]
summary: "Security researchers published technical details for PwnEscape, a vulnerability tracked as CVE-2026-99999 that allows code running in a virtual machine to take control of the host physical server. The flaw affects multiple industry-standard hypervisors using the Linux kernel networking stack and carries a critical CVSS score of 9.3, enabling host-kernel memory reads, controlled writes, and root command execution. The vulnerability was published on October 15, and researcher 0x4d31 reportedly rediscovered it in under 2 hours using OpenAI's gpt-5.6-cyber model after identifying the word \"virtio\" in a partially redacted Vercel bounty screenshot."
---

# PwnEscape's 9\.3 CVSS KVM Flaw Gives VM Guests Root Host Control

> [Open the canonical story](<https://aidr.today/45bab6a8?lang=en>)

**Published:** 2026-10-15T18:39:19.000Z
**Category:** Research
**Topics:** openai, llm, safety

## Summary

Security researchers published technical details for PwnEscape, a vulnerability tracked as CVE\-2026\-99999 that allows code running in a virtual machine to take control of the host physical server\. The flaw affects multiple industry\-standard hypervisors using the Linux kernel networking stack and carries a critical CVSS score of 9\.3, enabling host\-kernel memory reads, controlled writes, and root command execution\. The vulnerability was published on October 15, and researcher 0x4d31 reportedly rediscovered it in under 2 hours using OpenAI's gpt\-5\.6\-cyber model after identifying the word "virtio" in a partially redacted Vercel bounty screenshot\.

## Sources

- [Story source](<https://marketbrief.now/cybersecurity/pwnescapes-93-cvss-kvm-flaw-gives-vm-guests-root-host-control-d1e65905>)
- [Story source](<https://huggingnews.com/cybersecurity/pwnescapes-93-cvss-kvm-flaw-gives-vm-guests-root-host-control-d1e65905>)
- [Discussion](<https://lobste.rs/s/np84oh/pwnescape_guest_host_kvm_escape_cve_2026>)
- [Story source](<https://pwn.ai/blog/pwnescape>)