Coinspect escapes Firecracker via CVE-2026-122192

Coinspect demonstrated a sandbox escape from guest userspace in Firecracker, detailing an exploit chain involving a memory-replacement failure that allowed access to live virtual-machine monitor memory and a seccomp policy bypass using io_uring. The guest-to-Firecracker issue is fixed in Firecracker v1.16.2 and v1.17.0, while a proposed seccomp redesign addressing the bypass remains under review. AWS confirmed that its services, including AWS Lambda, are not affected by the vulnerability. Open article →