# CVE-2026-93834

QEMU 9pfs race allows VM escape to host file read/write and code execution.

- Page: https://www.vulneraibility.com/cve/CVE-2026-93834
- CVSS: 8.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.40% (percentile 35.0)
- Unvetted proof-of-concept code on GitHub: 1 GitHub proof of concept (first 2026-09-26)
- CISA SSVC: exploitation poc, automatable no, technical impact total (assessed 2026-09-25)
- Weakness: CWE-416
- Published: 2026-09-25

## Affected

- QEMU (9pfs subsystem)
- VMs using 9p/shared folders (9pfs)
- KVM/QEMU deployments and cloud hosts

## Impact

Malicious guest exploits 9pfs race to escape VM, read/write host files and execute code as the QEMU process user.

## Action

Immediate action required

## Recommendation

Apply vendor QEMU patches immediately; disable/restrict 9pfs; isolate untrusted guests

## References

- [other] https://access.redhat.com/security/cve/CVE-2026-93834
- [other] https://bugzilla.redhat.com/show_bug.cgi?id=2537939
- [other] https://gitlab.com/qemu-project/qemu/-/work_items/4491

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.