Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]
Technical disclosure of 'Januscape,' a critical guest-to-host escape vulnerability in KVM/x86 environments. The vulnerability allows an attacker to break out of a virtual machine to the host kernel, affecting both Intel and AMD architectures.
Why it matters
Highlights a significant security risk for cloud providers and multi-tenant virtualization environments.
This document describes the Januscape (CVE-2026-53359) vulnerability discovered and reported by Hyunwoo Kim (@v4bel) . It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment. To the best of public knowledge, this is the first guest-to-host exploit research triggerable on both Intel and AMD rather than being limited to a single architecture.
Purely technical security disclosure with no political or social framing.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in