Pwn.ai Claims Root Code Execution on Firecracker Host After microVM Escape

Pwn.ai says it escaped a Firecracker microVM and achieved code execution as root on the host, according to its 6 November 2026 post "Firecracker VM Escape: PwnEscape Part 2." It builds on the company's Part 1 guest-to-host KVM escape, CVE-2026-99999. Firecracker was developed at AWS to accelerate Lambda and Fargate. Claims are the company's own; none are independently confirmed.