CVE-2026-27211

CVE-2026-27211 is a critical vulnerability affecting Cloud Hypervisor versions 34.0 through 50.0, allowing arbitrary host file exfiltration when using virtio-block devices backed by raw images. A malicious guest can craft a QCOW2 header to point to sensitive host paths, which the image format auto-detection then parses upon VM reboot or disk scan, serving the host file's contents to the guest. This vulnerability has a CVSS score of 10.0 (Critical) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, requiring either a writable backing image or an untrusted image source for successful exploitation. There is currently no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available, though it has received some community discussion.