KVM guest escape and PQC signing plans

A guest-to-host KVM escape reached public disclosure with an upstream patch already merged, while NIST advanced a concrete FN-DSA signing specification. Several moderate Apache Airflow provider flaws and a Vim remote code execution issue rounded out the day alongside a new isogeny-based NIKE release.

KVM guest-to-host escape disclosed as PwnEscape

Public disclosure on oss-security detailed PwnEscape, a guest-to-host escape in the Linux KVM hypervisor tracked as CVE-2026-99999 that enables host memory disclosure. A fix has already been merged upstream. Virtualization operators and cloud providers should verify that their kernels include the patch.

NIST details FN-DSA signing plan for FIPS 206

The NIST PQC forum received a new plan for FN-DSA that specifies signing with fixed-point arithmetic and known-answer test validation under the forthcoming FIPS 206 standard. Discussion spanned dozens of messages among multiple participants. Implementers of lattice-based signatures need the concrete arithmetic and test vector requirements to proceed.

Vim cargo quickfix hooks allow ex command execution

Vim maintainers disclosed a medium-severity issue in versions before 9.2.1201 in which unescaped directory names in cargo quickfix autocommands permit ex command execution. The report was posted to oss-security. Users who open untrusted Rust projects inside Vim should upgrade promptly.

Airflow SSH and SFTP providers skip host-key checks

Apache announced CVE-2026-94134 affecting the Airflow SSH and SFTP providers, which disable SSH host-key verification by default. The flaw is rated moderate. Deployments that rely on these providers for remote file or command operations face elevated man-in-the-middle risk until configuration or code is updated.

MIKE isogeny NIKE released with C and Rust code

The first public release of MIKE, a compact isogeny-based post-quantum non-interactive key exchange, appeared on the NIST PQC forum together with C and Rust implementations. Forum participants examined its size and speed claims. Cryptographers evaluating alternative NIKE constructions now have concrete code and parameters to review.

Airflow Keycloak provider grants excessive audit-log access

CVE-2026-92228 covers an authorization flaw in the Apache Airflow Keycloak provider whereby multi-team provisioning gives every team role global read access to the audit log. The issue was disclosed on oss-security. Operators using Keycloak multi-team setups should restrict audit-log permissions until a fix is applied.

Godot binary resource loader heap overflow disputed

A heap out-of-bounds write via negative string length in the Godot 4.x binary resource loader received a CVE assignment, yet the vendor disputes the severity while the reporter argues for a higher rating and notes the issue remains unpatched. The exchange continues on oss-security. Game developers embedding Godot resource loading should monitor the outcome.

Airflow async SFTP hook also disables host-key verification

Apache disclosed CVE-2026-94135 for the Airflow async SFTP hook, which likewise turns off host-key verification by default and carries a moderate severity rating. The pattern mirrors the earlier SSH/SFTP provider issue. Environments using asynchronous SFTP transfers need the same host-key hardening.