#guest-agent

QEMU guest agent SSH key flaw lets users seize root files

CVE-2026-12080 is a symlink race in guest-ssh key handling that can hand ownership of arbitrary root-owned paths to an unprivileged guest user.