Firecracker VM Escape: PwnEscape Part 2
The gist
PWN.AI Security Research says it escaped the Firecracker microVM and got root code execution on the host.
The flaw is in the host's kernel networking path, widening exposure.
How it unfolded
- Oct 31, 2026A PwnEscape Explained video described the one critical finding in Vercel's $1M sandbox challenge — a Linux kernel bug, not a hypervisor bug.
- Nov 4, 2026Coinspect published a blog post titled 'Escaping Firecracker from Guest Userspace'.
- Nov 5, 2026PWN AI posted that it had escaped the Firecracker VM and gained root execution on the host, with a technical writeup and proof-of-concept code; Paulos Yibelo posted part 2 of PwnEscape, covering the port from host memory leak to controlled write to root.
Key terms
- microVM
- A software emulation of a computer system that provides the functionality of a physical computer in an isolated environment.
- root
- A special superuser account in computing used for system administration with unrestricted system-wide privileges.
Source: Wikipedia