QEMU Guest Agent Symlink Race Condition Privilege Escalation

CVE-2026-12080 is a critical privilege escalation vulnerability in QEMU Guest Agent's SSH key management handler that allows local unprivileged users to manipulate file ownership through symlink exploits. The vulnerability exists in the guest-ssh-add-authorized-keys command handler, where attackers can either abuse predictable directory symlinks or exploit Time-of-Check to Time-of-Use (TOCTOU) race conditions to gain control of arbitrary root-owned files and directories. This affects any system running QEMU with the guest agent enabled, particularly virtualized environments where guest-to-host privilege escalation could enable lateral movement within infrastructure. The attack requires local access but no special privileges, making it a significant threat in multi-tenant cloud environments and shared hosting scenarios.

While this CVE currently maps to zero Casky.ai skills due to the absence of specific MITRE ATT&CK technique mappings, practitioners can detect related attack patterns by monitoring for suspicious file system activity around SSH key directories (/root/.ssh, authorized_keys files) and system calls indicating symlink operations combined with file ownership changes. Detection would focus on identifying TOCTOU race conditions through rapid successive file access and modification events, unusual symlink creation in system directories, and privilege escalation artifacts where unprivileged processes attempt ownership of root-level resources. Security teams should implement file integrity monitoring and auditd rules tracking SSH configuration modifications, inode changes, and unexpected symlink traversals in critical system paths—attack indicators that Claude's reasoning capabilities could correlate across multiple data sources to identify exploitation attempts in real time.