Pwn.ai Claims Root Code Execution on Firecracker Host After microVM Escape

Pwn.ai says it escaped a Firecracker microVM, a minimal virtual machine, and gained root code execution on the host, per its 6 November 2026 post "Firecracker VM Escape: PwnEscape Part 2." It builds on Part 1, a guest-to-host KVM escape, CVE-2026-99999. Firecracker was developed at AWS to accelerate Lambda and Fargate. Claims are the company's own; none are independently confirmed.