A critical flaw in the Linux kernel, tracked as CVE-2026-99999 and dubbed ‘PwnEscape,’ allows a virtual machine to read memory on its host computer. A researcher successfully demonstrated this against Vercel’s live cloud sandboxes. The vulnerability resides in the Linux kernel’s networking code, making it a widespread issue affecting shared cloud environments and potentially allowing guest-to-host escapes.