CVE-2026-93834

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description A use-after-free issue exists in the 9pfs subsystem. A race condition occurs between the main thread and a worker thread during the concurrent processing of Tlcreate and Twalk requests. This allows a malicious guest user to create a fid path containing stale heap data, which enables the bypass of directory traversal restrictions and an escape from the shared directory boundary. Consequently, this can lead to arbitrary host file read/write and code execution (VM escape) with the privileges of the QEMU process user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.