Pwn.ai Claims It Broke Out of a Firecracker Virtual Machine

Pwn.ai says it broke out of a Firecracker virtual machine, a software box in a server, and gained root control of the host, per its 6 November 2026 post, "Firecracker VM Escape: PwnEscape Part 2." It builds on an earlier breakout, CVE-2026-99999. Amazon built Firecracker to speed up Lambda and Fargate. The claims are unconfirmed and come from the company.