pwn.ai

PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999) | PWN.AI Security Research

How a $1 million sandbox challenge led pwn to a Linux CHECKSUM_PARTIAL trust-boundary bug: a post-validation IPv4 header mutation, a 32-byte host-memory disclosure, and a reliable full host VM escape.

If the page stays blank, open it in a new tab. Your Weird rating still works from the top bar.

Open source